Privacy policy

What we access

When you sign in with Google, you grant Nuragrid for Gmail access to your Gmail account through the gmail.modify scope (in deployments configured as read-only, the narrower gmail.readonly scope instead), along with your basic profile (name, email address and profile image URL). We use that access only to carry out the tool calls that an AI client you have authorized sends on your behalf, such as searching, reading, drafting, sending or labelling messages. We do not read your mail for any other purpose.

What we store

• Your Google OAuth tokens, encrypted at rest. They are kept so your authorized clients can keep working, and are used only to call Gmail for you.
• Your account email address, name and profile image URL, as provided by Google.
• Sign-in session records for the web dashboard, including the IP address and browser user agent of the session.
• Metadata about the AI clients you have authorized: the client name, the access you granted (read or write) and when.
• Metadata-only audit records of actions: the tool name, message or thread IDs, counts, a timestamp and a success or failure status.

What we do not store

We do not store the content of your email: no message bodies, subjects, recipients, snippets or attachments. Gmail data is passed through to the AI client you authorized for the duration of a request and is not kept by Nuragrid for Gmail. Once that data reaches your AI client, it is handled under that client provider's own privacy policy and terms, not this one.

Retention

• Audit records are deleted after 90 days.
• Google tokens and grant records are kept until you disconnect Gmail or delete your account.

Deleting your data

From the dashboard you can revoke any individual AI client, disconnect Gmail (which revokes our access at Google and invalidates every client), or delete your account. You can also remove our access at any time from your Google Account permissions page.

Google API Services User Data Policy

Nuragrid for Gmail's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

In practice: we use Gmail data only to provide the features you request through your AI client, we do not transfer it to others except as needed to provide those features or to comply with law, we do not use it for advertising, and no human reads it unless you ask us to for support or it is required for security or legal reasons.

No sale of data, no ads

We do not sell your data, share it for advertising, or use it to train machine learning models.

A caution about AI assistants

AI assistants can be manipulated by the content of the emails they read, for example a message that contains hidden instructions. To limit the damage a manipulated assistant could do, grant read-only access to clients that only need to read mail, and prefer read-only grants for automation. You can revoke any client from the dashboard.

Infrastructure

Nuragrid for Gmail runs on Cloudflare. Your account records and encrypted tokens are stored there.

Changes

If we change this policy, we will update the date above. Material changes will be announced on this site.

Contact

Questions about this policy: support@example.com.