Privacy Policy

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the AI Agent application (the “Service”), and tells You about Your privacy rights and how the law protects You. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

1. Definitions and Interpretation

Words with initial capitalization have meanings defined under the following conditions. These definitions apply whether they appear in singular or plural.

• Account means a unique account created for You to access our Service.
• Application means the software program named AI Agent downloaded by You from an Application Store (Apple App Store or Google Play Store).
• Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to the operator of AI Agent.
• Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
• Personal Data means any information relating to an identified or identifiable individual.
• Google User Data means data obtained through OAuth authorization from Google services such as Gmail, Google Calendar and Google Drive.
• Service refers to the AI Agent application and related online services.
• Usage Data refers to data collected automatically, such as IP addresses, device identifiers, browser types and time spent on the Service.
• You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

2. Collecting and Using Your Personal Data

2.1 Types of Data Collected

Personal Data. While using Our Service, We may ask You to provide certain personally identifiable information that can be used to contact or identify You. This may include, without limitation:

• Email address
• First name and last name (when You choose to provide them)
• Authentication credentials from third-party sign-in (Google, Apple, Microsoft) — received as an access token and basic profile fields only.

Usage Data. Collected automatically when using the Service. Usage Data may include Your Device’s IP address, browser type and version, pages of our Service that You visit, time and date of Your visit, time spent on those pages, unique device identifiers and other diagnostic data.

Google User Data. When You connect a Google service (for example, Gmail, Google Calendar or Google Drive) via OAuth, We access only the scopes You approve. See Section 3 for details.

2.2 How We Use Your Data

We use Your data for the following purposes:

• To provide and maintain the Service, including generating AI responses, drafting emails, and returning relevant calendar or file results.
• To manage Your Account and enable connectors You explicitly enable.
• To communicate with You by email or push notification about updates, security alerts and support messages.
• To perform analytics and diagnostics that help Us improve reliability and user experience.
• To comply with legal obligations and enforce our Terms & Conditions.

3. Google User Data & Limited Use

3.1 Scopes we may request

Depending on the connectors You enable, AI Agent may request the following OAuth scopes:

• openid, email, profile — to identify You when You choose “Sign in with Google”.
• Gmail (read / compose / send / modify) — to list, read, draft and send emails that You ask the assistant to handle.
• Google Calendar (read / write) — to read Your calendars and create events You request.
• Google Drive (read / file-scoped) — to open, preview, and search files You attach or explicitly reference.

Scopes are only requested at the moment You enable the corresponding connector. You may disconnect a connector at any time from Settings → Connectors inside the app, or by visiting Google Account Permissions.

3.2 How Google user data is used

Google user data is used exclusively to provide user-facing features within the Service, specifically:

• Summarizing, drafting, replying to, and (upon Your explicit confirmation) sending email messages.
• Retrieving upcoming events, checking availability, and creating calendar entries You request.
• Reading, searching and previewing Drive files You attach to a conversation.
• Passing relevant context to third-party AI providers listed in Section 4 in order to generate responses for You.

3.3 What we do NOT do with Google user data

• We do not sell or rent Google user data to any third party.
• We do not use Google user data for advertising, ad targeting, or marketing purposes.
• We do not use Google user data to train generalized machine learning or AI models.
• We do not transfer Google user data to third parties except to the AI providers listed in Section 4 for the sole purpose of fulfilling Your request, or where required by law.

3.4 Storage, transfer, and retention of Google user data

• In-transit: Google user data is transmitted over TLS/HTTPS between Google, our servers, and Your Device.
• At-rest: Access and refresh tokens are stored encrypted on our servers, associated with Your Account. Message bodies and file content are cached only for as long as required to complete Your current conversation.
• Retention: Cached Google user data is deleted automatically when the associated conversation is deleted, or within a maximum of 30 days from last use, whichever comes first. Tokens are deleted when You disconnect the connector or delete Your Account.
• Human review: We do not perform human review of Your Gmail messages, Calendar events, or Drive file contents except where strictly necessary for support or abuse investigation, and only with Your prior consent or as required by law.

4. Third-Party AI Services & Data Sharing

Our Application integrates third-party AI service providers to deliver AI-driven features. When You use these features, Your submitted prompts, together with the specific email, calendar, or file content You ask the assistant to work on, will be shared with these providers solely for generating responses. We contractually require our partners to provide at least the same level of data protection as outlined in this Privacy Policy.

Important Note: While we only partner with reputable providers, we cannot guarantee the absolute security of data transmitted to third parties. We do not sell or rent Your personal data to third parties for marketing purposes.

5. Data Retention and Deletion

Retention. We retain Your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our legal agreements. Usage Data is generally retained in aggregated form for analytics; personally identifiable Usage Data is retained for a shorter period.

Deletion. You may delete Your Account, conversations, attachments and connected service authorizations at any time from within the Service or by contacting Us. Upon deletion:

• Personal Data and content associated with Your Account will be removed from production systems within 30 days.
• Backups containing Your data will be rotated and overwritten within 90 days.
• Google OAuth tokens are revoked; You may also revoke them directly at Google Account Permissions.
• We may retain certain information where we have a legal obligation or lawful basis to do so (for example, transactional records for tax purposes).

6. Security of Your Data

The security of Your Personal Data is important to Us. We employ commercially acceptable security measures including TLS encryption in transit, encrypted storage for tokens and sensitive fields, access controls, and periodic security reviews. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

7. Your Rights

You have the following rights regarding Your Personal Data:

• Access & portability — request a copy of the Personal Data we hold about You.
• Correction — update or amend Your information at any time via Your Account settings.
• Deletion — request deletion of Your Personal Data, subject to legal retention obligations.
• Restriction & objection — request that we restrict or stop certain processing.
• Withdraw consent — disconnect any OAuth connector at any time.

To exercise any of these rights, contact Us at ai_agent_support@yeah.net. We will respond within the timeframe required by applicable law.

8. International Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of Your jurisdiction. Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer. We will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy.

9. Children’s Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from a child without verification of parental consent, We will take immediate steps to remove that information from Our servers.

10. Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top. If a change materially affects how we use Google user data or Your Personal Data, we will provide prominent notice within the Service before the change takes effect. You are advised to review this Privacy Policy periodically.

11. Contact Us

If You have any questions about this Privacy Policy, or wish to exercise Your rights, You can contact Us:

• By email: ai_agent_support@yeah.net
• By visiting the AI Agent homepage and using the contact section.