Privacy Policy

Information we collect

• Account and invitation information. When you request access, we collect your first name, surname, and email address. If your email domain is not pre-approved, authorized administrators review the request. Approved details become your member profile and authentication record with our identity provider (Supabase Auth).
• Connected-service data. When you connect a Google, Slack, or Monday.com account, we access data from those services on your behalf through our integration provider (Composio): email messages and drafts, calendar events, task lists, selected Drive files, and Slack and Monday.com messages and mentions. Google Workspace APIs are used to read this content and, only under an exact approved action, to create Gmail drafts, send email, change calendar events, update tasks, or create Google Docs. We never send email, post messages, or create shared content without your approval or a matching workspace-scoped standing permission you created.
• Derived data. We store the output of AI analysis of your email (for example a priority score, a one-line summary, a category, extracted action items, and any draft reply you generate) so results are not recomputed on every load.
• Agent and knowledge data. If you enable the personal agent, we store conversations, run and approval history, confirmed or proposed memories, reusable workflow versions, activity and cost records, and the private documents you choose to upload or import. Uploaded and selected Drive documents are stored in private storage and indexed in access-controlled text and semantic chunks for retrieval.
• Preferences. Settings such as your theme, brief time, notification choices, home city and timezone, and brand-voice preferences.
• Device tokens. If you enable notifications on iOS, we store an Apple Push Notification token so we can deliver alerts.

How we use your information

• To present your unified inbox, calendar, tasks, and messages.
• To provide optional AI features you invoke: prioritizing and summarizing email and drafting replies for your review and approval.
• To deliver notifications you have enabled.
• To run routines you enable, prepare private drafts and reports, retrieve relevant selected knowledge, and request approval before an external action unless a matching standing permission is active.
• To operate, secure, and troubleshoot the service.

We do not sell your personal data, and we do not use your Google user data for advertising or to train generalized AI/ML models.

Google user data and Limited Use

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only access the Google data needed to provide the features described above.
• Email content you triage or reply to is transmitted to our AI processor solely to generate the summary, score, or draft you requested, and is not retained by that processor for its own purposes (the request is sent with retention disabled).
• Drive data is limited to files you explicitly select for private agent knowledge. Disconnecting that Drive account removes its indexed copies from the agent.
• Google Docs access is a separate optional connection used only to create documents from agent output you approve. Account ownership and workspace access are checked again immediately before creation.
• We do not transfer Google user data to third parties except as needed to provide the service (see subprocessors below), for security, or to comply with applicable law.
• No humans read your Google data except where you explicitly request support, where required for security or to comply with the law, or in aggregated/anonymized form.

Service providers (subprocessors)

We share data only with providers that help us run the service:

• Supabase — authentication and database storage.
• Composio — brokered, authorized access to Google, Slack, and Monday.com on your behalf.
• Lovable AI Gateway / OpenAI — AI processing for triage and drafting, and embeddings for private knowledge retrieval (with provider-side retention disabled where supported by the request).
• Tavily — optional live public-web research. Public search queries are generated without private document contents, credentials, or confidential source data.
• Apple Push Notification service — notification delivery.
• Cloudflare — application hosting and delivery.
• Resend — invitation, account reminder, and administrator review email delivery.

Data retention

We keep your data while your account is active. Derived analyses, agent conversations, confirmed memories, skill versions, private knowledge and preferences persist until you remove them, disconnect their source, delete agent data, or delete your account. Workflow execution records are retained for operational recovery for up to 30 days in the workflow service; the user-visible activity record follows your account retention choices.

Minimal AI usage records track the feature, amount, billing month, and technical identifiers needed to enforce your usage limit. These records remain while your account is active. Deleting agent content does not reset monthly AI usage; deleting your account removes these accounting records as well.

Invitation requests are retained while they await review or redemption. A rejected request is deleted immediately. When an invitation is redeemed, its status is retained with the account so we can enforce access controls and prevent reuse, and it is erased when that account is deleted. Short-lived email verification codes expire after one hour; the app and its administrators cannot read those codes from our invitation records.

Your choices and account deletion

• Disconnect a service at any time from the Accounts screen, which revokes our access to that service and removes its rows and dependent indexed content.
• Control the agent by pausing it, revoking standing permissions, approving or rejecting proposed memories, deleting selected knowledge, or deleting all agent data while leaving ordinary app features available.
• Delete your account from Settings, in both the web app and the iOS app. Deleting your account permanently removes your account record and associated personal data (connected accounts, analyzed email data, briefs, tasks, saved drafts, preferences, agent conversations, memories, skills, private knowledge and activity) and revokes your Google, Slack, and Monday.com connections. This cannot be undone.

Security

Data is encrypted in transit. Access to third-party services is brokered with scoped authorization, and provider credentials are never exposed to the browser or stored in client code. Despite reasonable safeguards, no method of transmission or storage is completely secure.

Children

The service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions or requests about your data: privacy@autosolutions.ai.