1. How connections work
You choose which apps to connect. Most connect through the app’s own sign-in, so your password stays with that app. A few, such as IMAP email or your own API, need a password or key you paste once.
Sign-in tokens and keys are encrypted before they’re stored. Many connections are made through Composio, which holds the sign-in for us.
A command only uses the apps in its steps and only sends what those steps need.
2. Their terms apply too
Each app you connect is run by another company under its own terms and privacy policy, which apply to the data your commands send it.
Google sign-in data is processed under Google’s privacy policy (policies.google.com/privacy).
3. AI
Commands.io uses OpenAI to understand commands and to run AI steps. Details are in the Privacy policy.
4. Disconnecting
Disconnect an app in Connections at any time. Commands that need it stop until you connect it again. You can also remove access in the app’s own settings, or write to contact@commands.io and we’ll delete the stored sign-in.