Privacy Policy

Effective date: August 9, 2026 Last updated: August 9, 2026

This explains what Glen collects, why, who else sees it, and what you can do about it. Robert Dubois runs Glen and is responsible for the data described here.

The short version: we collect what the product needs to work, we send your content to two AI companies to generate results for you, neither of them is allowed to train on it, we don't sell anything, and you can delete it all from inside the app.

1. Who we are

Glen is run by Robert Dubois. Privacy questions and requests go to legal@glen.so, which is the fastest way to reach a person about anything in this policy.

2. What we collect about you

Account information. Your email address, your name if you give it, and when you last used the service. We sign you in by emailing a link and a code; we store only a hashed version of those, never the code itself.

Your Substack connection. Your Substack handle, display name, profile photo, bio, and time zone. We also store your Substack session credentials, which you provide, so we can act on your account. See section 4 — it matters enough to have its own heading.

What you write. Drafts, published notes, scheduled notes, the tags and links you attach, and earlier versions of drafts you edited.

What you save. Highlights and articles you capture from the iOS share sheet, the web, email, or Readwise — including the text you selected, the source URL, title, author, and your own notes on it.

Your conversations with the AI assistant, including threads, messages, and facts the assistant records about you and your writing so it can be useful later.

Statistics about your Substack account: reactions, restacks, comments, follower and subscriber counts, paid subscriber counts, and the traffic and revenue attribution figures Substack reports to you. These come from your own Substack account.

How you use the product: which suggestions you looked at and acted on, and counts of AI generations with the number of tokens used.

Technical information needed to run a web service: IP address, browser or device type, and timestamps, in server logs.

We do not collect payment information of any kind, because Glen is free and there is nothing to pay. We have no analytics SDK, no advertising network, and no tracking pixels.

3. What we never do

We never post, like, follow, restack, or message anyone on your behalf beyond what you explicitly wrote and queued.
We never read your email inbox, your private Substack drafts, or your subscriber list.
We never use your writing to build features for anyone else's account.
We never sell or share your data with advertisers or data brokers.
We never train AI models on your content, and our AI providers may not either.

4. Your Substack credentials

To publish and read statistics on your behalf, we store the session credentials you give us. This is the most sensitive thing we hold, and we treat it that way.

Encrypted with AES-256-GCM. Each record gets its own key, wrapped by a master key held separately from the database.
Used only to act on your Substack account as you have asked.
Never shown back to you, never logged, never shared with anyone.
Deleted when you disconnect the account or delete your Glen account.

You can disconnect at any time in settings, which is also worth doing from Substack's side if you want to invalidate the session entirely.

5. Why we use it

To run the service you asked for — publishing, scheduling, statistics, drafts, saved highlights
To generate AI drafts and answers, and to learn your writing style from your own published notes
To sign you in and keep your account secure
To answer you when you write to us
To meet legal obligations

If you're in the UK or EEA, our legal bases are: performing our contract with you for everything needed to run the service; legitimate interests for security, abuse prevention, and understanding whether the product works; and consent where we ask for it, which you can withdraw at any time.

6. Other Substack creators — people who don't use Glen

We want to be straightforward about this, because it's unusual.

To show you how your account compares to similar ones, Glen collects information about other Substack creators who are not our users, from pages Substack makes publicly available. That includes their handle, display name, publication address, publicly shown follower and subscriber counts, bestseller status, which publications recommend which, and the text of their public notes. We refresh it daily and keep historical snapshots so comparisons work over time.

We use it only to produce benchmarks for our own users. We don't sell it, publish it as a dataset, contact anyone based on it, or build advertising profiles from it.

If you're a Substack creator and you want out, write to legal@glen.so and we will delete your information and stop collecting it. We don't need you to have an account with us, and we won't ask you why.

7. Who else sees your data

We use these companies to run Glen. Each processes data only on our instructions.

Who	What for	Where
Anthropic, PBC	AI drafting, analysis, and the assistant	USA
Voyage AI	Converts saved highlights into search embeddings	USA
Supabase	Hosts the database	USA
Render	Hosts the application and background workers	USA
Resend	Sends sign-in emails	USA
Substack	Where your notes publish and statistics come from	USA
Readwise	Only if you connect it, to import your highlights	USA

On AI training: Anthropic's commercial terms state that Anthropic may not train models on customer content. We have configured our account with Voyage AI so that your content is not used for training and not retained. We do not train any model on your content ourselves. If that ever changes we will ask you to opt in first.

We'll also disclose information if the law requires it, to protect someone's safety, or to a buyer if the business is ever sold — in which case we'll tell you before your data moves.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

8. How long we keep it

Your content and account data: as long as your account exists.
After you delete your account: removed from live systems within 30 days. Encrypted backups age out within 90 days.
Substack credentials: deleted immediately when you disconnect or delete.
Sign-in links and codes: expire in 15 minutes; the record is cleared after use.
Server logs: 30 days.
What our AI providers keep: Anthropic deletes inputs and outputs from its systems on the schedule in its published retention policy, with exceptions for flagged safety issues. Voyage retains nothing, because we've opted out.
Records we need for tax or legal reasons are kept as long as the law requires.

9. Your choices and rights

You can do these yourself, right now, in the app:

See and edit your content — every draft, note, and saved highlight is individually visible and editable.
Delete individual items, including any saved highlight.
Disconnect Substack or Readwise.
Delete your entire account and all your data, from Settings on the web and from the Account tab in the iOS app.

Or write to legal@glen.so and we'll help with any of the above, plus a copy of your data in a portable format. We'll respond within 30 days and won't charge you or treat you differently for asking.

If you're in the UK or EEA, you also have the right to object to or restrict processing, to withdraw consent, and to complain to your data protection authority. Data goes to the United States; where required we rely on the Standard Contractual Clauses in our providers' data processing agreements, and you can ask us for a copy.

If you're in California, you may request the categories of personal information we've collected, request access or deletion, and not be discriminated against for asking. Use the same address.

10. Security

Credentials are encrypted as described in section 3. Sign-in tokens and API tokens are stored only as hashes. Sessions are limited in time and can be ended by logging out. Traffic is encrypted in transit. On iOS, your access token is held in the device Keychain and only readable after first unlock on that device.

No system is perfectly secure, and we can't guarantee it. If a breach affects your data, we'll tell you and the relevant regulators as required by law.

11. Tracking and Do Not Track

We do not track you across other websites or over time, and we don't allow anyone else to do so on our site. We have no advertising networks, no analytics SDKs, and no third-party tracking pixels.

We use cookies only to keep you signed in. These are strictly necessary to run the service and can't be turned off without logging you out. We do not respond to Do Not Track browser signals, because we don't do the tracking those signals are designed to stop.

12. Children

Glen is for adults. You must be 18 or older to use it, and we don't knowingly collect anything from anyone under 18. If we learn we have, we'll delete it. Write to legal@glen.so if you believe a minor has an account.

13. Changes to this policy

If we make a material change — new categories of data, a new purpose, a new AI provider, or anything touching training — we'll email you at least 30 days before it takes effect, and we'll say plainly what changed. Minor changes get a new date at the top. Ask us at legal@glen.so for any previous version and we'll send it to you.

14. Contact

Robert Dubois — legal@glen.so

Removal requests from Substack creators who don't use Glen go to the same address; see section 5. You don't need an account, and we won't ask why.