Privacy Policy

Last updated: 3 September 2026

Smart Comms Hub ("the app", "we", "us") is a personal productivity dashboard that unifies your Gmail, Google Calendar, Google Tasks, Slack, and Monday.com accounts into one read-first view, with optional AI assistance for triaging email and drafting replies. This policy explains what data we handle, why, who we share it with, and how you can delete it.

Information we collect

  • Account and invitation information. When you request access, we collect your first name, surname, and email address. If your email domain is not pre-approved, authorized administrators review the request. Approved details become your member profile and authentication record with our identity provider (Supabase Auth).
  • Connected-service data. When you connect a Google, Slack, or Monday.com account, we access data from those services on your behalf through our integration provider (Composio): email messages and drafts, calendar events, task lists, and Slack and Monday.com messages and mentions. Google Workspace APIs are used to read this content and, only when you explicitly approve a draft, to create a Gmail draft. We never send email or post messages without your explicit action.
  • Derived data. We store the output of AI analysis of your email (for example a priority score, a one-line summary, a category, extracted action items, and any draft reply you generate) so results are not recomputed on every load.
  • Preferences. Settings such as your theme, brief time, notification choices, home city and timezone, and brand-voice preferences.
  • Device tokens. If you enable notifications on iOS, we store an Apple Push Notification token so we can deliver alerts.

How we use your information

  • To present your unified inbox, calendar, tasks, and messages.
  • To provide optional AI features you invoke: prioritizing and summarizing email and drafting replies for your review and approval.
  • To deliver notifications you have enabled.
  • To operate, secure, and troubleshoot the service.

We do not sell your personal data, and we do not use your Google user data for advertising or to train generalized AI/ML models.

Google user data and Limited Use

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only access the Google data needed to provide the features described above.
  • Email content you triage or reply to is transmitted to our AI processor solely to generate the summary, score, or draft you requested, and is not retained by that processor for its own purposes (the request is sent with retention disabled).
  • We do not transfer Google user data to third parties except as needed to provide the service (see subprocessors below), for security, or to comply with applicable law.
  • No humans read your Google data except where you explicitly request support, where required for security or to comply with the law, or in aggregated/anonymized form.

Service providers (subprocessors)

We share data only with providers that help us run the service:

  • Supabase — authentication and database storage.
  • Composio — brokered, authorized access to Google, Slack, and Monday.com on your behalf.
  • Lovable AI Gateway / OpenAI — AI processing for triage and drafting (with provider-side retention disabled).
  • Apple Push Notification service — notification delivery.
  • Cloudflare — application hosting and delivery.
  • Resend — invitation, account reminder, and administrator review email delivery.

Data retention

We keep your data while your account is active. Derived analyses and preferences persist until you delete the underlying account connection or your account. When you delete your account, we remove your data as described below.

Invitation requests are retained while they await review or redemption. A rejected request is deleted immediately. When an invitation is redeemed, its status is retained with the account so we can enforce access controls and prevent reuse, and it is erased when that account is deleted. Short-lived email verification codes expire after one hour; the app and its administrators cannot read those codes from our invitation records.

Your choices and account deletion

  • Disconnect a service at any time from the Accounts screen, which revokes our access to that service and removes its rows.
  • Delete your account from Settings, in both the web app and the iOS app. Deleting your account permanently removes your account record and associated personal data (connected accounts, analyzed email data, briefs, tasks, saved drafts, preferences, and memories) and revokes your Google, Slack, and Monday.com connections. This cannot be undone.

Security

Data is encrypted in transit. Access to third-party services is brokered with scoped authorization, and provider credentials are never exposed to the browser or stored in client code. Despite reasonable safeguards, no method of transmission or storage is completely secure.

Children

The service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions or requests about your data: privacy@autosolutions.ai.