AI Email Workspace("we," "us," or "our") provides an AI-powered email workspace that helps you understand, organize, and reply to your email. This Privacy Policy explains what information we collect, how we use it, the choices you have, and the rights you can exercise. By accessing or using AI Email Workspace, you acknowledge that you have read and understood this policy.

We are committed to protecting your privacy. This policy applies to the website, the web application, and any related services we offer. Where we say "you," we mean the person using our services.

We collect information in the following categories:

• Account information. When you sign in with Google OAuth, we receive your name, email address, and profile picture where applicable.
• Email data. To provide our features, we may access your email metadata (such as sender, recipients, subject, and timestamps) and, depending on the features you use, message content. Depending on the enabled features, we may generate and store derived analyses, such as AI summaries, so that features can be delivered efficiently.
• Usage information. We may collect limited technical information, such as browser type, device information, and basic logs, to operate, secure, and improve the service.
• Payment information. If you purchase a paid plan, payment processing is handled by third-party payment processors. We do not store full payment card numbers.

We use the information we collect to:

• Provide, operate, and maintain our services.
• Deliver AI-powered features such as email summaries, organization, search, and reply drafting.
• Respond to your requests, questions, and support inquiries.
• Maintain the security and integrity of the service, including detecting and preventing abuse or fraud.
• Comply with applicable legal obligations, where applicable.

We do not sell your personal data. We do not use your emails to train public AI models. Your data is processed only to deliver the services you request.

AI Email Workspace authenticates users using Google OAuth 2.0. Your Google password never reaches our servers.

• AI Email Workspace only requests the permissions required for its functionality.
• Email data is accessed and processed solely to provide the AI-powered features you use.
• You can revoke GSoren's access to your Google account at any time from your Google Account permissions settings or by disconnecting the account within the app.
• Our use of data received from Google APIs complies with Google's API Services User Data Policy and applicable Limited Use requirements.

To generate summaries, analyses, and reply drafts, we may send email content to third-party AI model providers (for example, through OpenRouter and the underlying model providers). Depending on the enabled features, the results of that processing (such as AI-generated summaries) may be stored so those features can be provided.

• We do not use your email content to train public AI models.
• Third-party AI providers process data on our behalf and are subject to their own privacy policies. Where applicable, we take steps to ensure they are contractually obligated to protect your data.
• Depending on the enabled features, you may have controls over which email content is processed.

Your data is stored on secure cloud infrastructure provided by third-party hosting providers. Where applicable, data is encrypted in transit (TLS) and at rest, and OAuth tokens and other credentials are encrypted.

Depending on the enabled features, the frontend may cache email data locally in your browser to enable offline access. This local cache stays on your device and is not transmitted to us.

We use cookies and similar technologies (such as local and session storage) to keep you signed in and to remember your preferences. Depending on the features enabled, we may also use analytics and preference cookies to understand usage and improve the service.

You can control or delete cookies through your browser settings. Disabling essential cookies may prevent the service from working correctly.

We work with third-party services to operate AI Email Workspace, including:

• Google, for authentication and Gmail access through the Google API.
• AI model providers, to power AI features.
• Hosting and infrastructure providers, to store and serve data.
• Payment processors, for paid plans where applicable.
• Analytics providers, where applicable.

These third parties process data in accordance with their own privacy policies and our instructions.

We implement industry-standard security measures to protect your data, including encryption, access controls, and monitoring. Where applicable, access to user data is restricted to authorized personnel on a need-to-know basis.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you should also take steps to protect your account credentials.

Depending on your location and applicable law (including the EU/UK General Data Protection Regulation), we process personal data on one or more of the following lawful bases:

• Consent, which you may withdraw at any time.
• Performance of a contract with you.
• Our legitimate interests, such as maintaining security and improving the service.
• Compliance with legal obligations, where applicable.

You have the following rights over your personal data:

• Access. Request a copy of the personal data we hold about you.
• Correction. Ask us to correct inaccurate or incomplete data.
• Erasure (deletion). Request deletion of your data and account.
• Restriction. Ask us to limit how we process your data in certain circumstances.
• Portability. Receive your data in a structured, machine-readable format, where applicable.
• Objection. Object to processing based on our legitimate interests.
• Withdraw consent. Withdraw any consent you provided at any time.
• Lodge a complaint. Contact your local supervisory authority.

To exercise any of these rights, contact us using the details in the Contact Information section. Where applicable, we will respond within the timeframe required by law. You can also revoke GSoren's access to your Google account at any time, as described in the Google Account & Gmail Access section.

We retain personal data only for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements.

Depending on the enabled features, derived data (such as AI analysis caches) may be stored to speed up features. You may request that we delete stored data. Where applicable, log and technical data may be retained for shorter periods for security and operational purposes.

When you request deletion or revoke access, we will delete or anonymize your data as required by applicable law, except where retention is required.

AI Email Workspace is not directed at children under the age of 13 (or the minimum age of digital consent in your jurisdiction), and we do not knowingly collect personal data from children.

If we learn that we have collected personal data from a child, we will take steps to delete it promptly. If you believe a child has provided us with personal data, please contact us.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will provide notice where applicable, for example by email or an in-app notification.

We encourage you to review this policy periodically.

If you have questions, concerns, or requests about this Privacy Policy or your personal data, you can contact us at:

• Email: privacy@example.com

We aim to respond to all legitimate requests within a reasonable timeframe.