Privacy Policy

i. Personal Data

Personally identifiable information, such as your name, business email address, organization name, and documents/files you choose to integrate with our Services (e.g., from Google Drive if permitted), address, email address, and telephone number, and demographic information, such as your age, gender, hometown, and interests, that you voluntarily give to us when you register with the Services, place an order, or when you choose to participate in various activities related to the Services.

ii. Derivative Data

Information our servers automatically collect when you access the Services, such as your IP address, browser type, operating system, access times, and the pages you have viewed directly before and after accessing the Services.

iii. Financial Data

Financial information, such as data related to your payment method (e.g., valid credit card number, card brand, expiration date) that we may collect when you purchase credits to use our services from the Site. We store only very limited, if any, financial information that we collect. Otherwise, all financial information is stored by our payment processor. We do not store full credit-card numbers; payment details are handled by our PCI-compliant processor.

iv. Data from Social Networks

User information from social networking sites, such as Facebook, Instagram, Microsoft, Google including your name, social network username, location, gender, email address, profile picture, and public data for contacts, if you connect your account to such social networks. OAuth tokens are encrypted at rest

v. Mobile Device Data

Device information, such as mobile device ID, model, and manufacturer, and information about the location of your device, if you access the Services from a mobile device.

vi. Cookies and Similar Technologies

We may use cookies and similar technologies to collect information about user interactions with the services for analytics and functionality purposes

i. By Law or to Protect Rights

If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others.

ii. Third-Party Service Providers

We may share your information with third parties that perform services for us or on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.

iii. Marketing Communications

With your consent, or with an opportunity for you to withdraw consent, we may share your information with third parties for marketing purposes.

iv. Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

v. Third-Party Advertisers

We may use third-party advertising companies to serve ads when you visit the Services. These companies may use information about your visits to the Services and other websites that are contained in web cookies to provide advertisements about goods and services of interest to you.

5.1. What Data We Access

We may access the following Google user data:

• 5.1.1. Google Drive file content and metadata (e.g., file names, types, and contents)
• 5.1.2. Basic user profile information (e.g., name, email address, profile photo—only if required for personalization or user authentication)
• 5.1.3. Other limited data as explicitly authorized by the user via OAuth consent

5.2. Why We Access It

Google user data is accessed solely to:

• 5.2.1. Search and retrieve documents or files stored in the user’s Google Drive
• 5.2.2. Provide natural language responses, summaries, or document-based insights
• 5.2.3. Enable secure, role-aware access to files as part of your organizational workflow

5.3. How Your Data Is Protected

We implement strong technical and organizational security measures to protect user data, including:

• 5.3.1. Data encryption in transit and at rest
• 5.3.2. Role-Based Access Control (RBAC) ensuring users only see permitted content
• 5.3.3. Periodic audits, activity logs, and access monitoring

5.4. No Use for AI/ML Model Training

We do not use any Google Workspace API data to develop, improve, or train generalized AI or machine learning models. All data processed remains within the context of the specific organization and session.

5.5. Scope and Consent

We access only the minimum necessary scopes as authorized by the user during the OAuth consent process. Users have complete control to grant or revoke access at any time.

5.6. Data Retention and Deletion

If access is revoked or an account is terminated, all associated Google user data is deleted from our systems within 30 days, in accordance with our data retention policy.

5.7. Google Workspace API Data Usage

We DOES NOT USE ANY DATA OBTAINED via Google Workspace APIs to develop, improve, or train generalized artificial intelligence or machine learning models. All data accessed through Google APIs is strictly limited to delivering user-requested functionality within the scope of the application. We access Google user data only after obtaining explicit user consent via OAuth, in accordance with Google’s API Services User Data Policy. Access is granted solely for the purposes described and is governed by the scopes authorized by the user at the time of consent.