Privacy policy

What we access and why

• Gmail (read): to search, read and summarise emails you ask about.
• Gmail (send): to send emails, only after you click Send on a draft.
• Calendar (read): to list your events and find free time.
• Calendar (events): to create, move or cancel events, only after you approve, unless you turn on automation in Settings.
• Contacts and people you've emailed (read): to work out who "Rahul" is.

What we store

• Your Google account id and email address.
• Google's access grant (refresh token), encrypted with AES-256-GCM. We never see or store your password.
• Conversations, including email and calendar excerpts the assistant read for you, encrypted at rest and deleted 30 days after the last message.
• An activity log of which tools were used and on what (search query, recipient, event id). It holds no email bodies and is kept 180 days.

We don't copy your mailbox or calendar. The assistant reads them live when you ask.

AI processing

Your messages, plus the email and calendar content the assistant reads to answer them, are sent to Microsoft's Azure OpenAI service for processing. Your Google credentials are never sent to the model. Azure OpenAI does not use this content to train models.

Your controls

• Delete any conversation from the sidebar.
• Disconnect Google in Settings, which revokes our access at Google immediately.
• Delete your account in Settings, which revokes access and erases everything we store.
• You can also remove access any time at myaccount.google.com/permissions.