Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account and billing information: Your email address when you sign up or sign in, and your subscription plan and status when you purchase a paid plan.
• Google account data: When you connect your Google account, we access Gmail messages, Google Calendar events, and Google Drive files using the permissions you explicitly grant via Google OAuth. We only access the data necessary to provide the features you use.
• Microsoft account data: When you connect your Microsoft account (Outlook, Office 365, or Hotmail), we access your emails and calendar events using the permissions you explicitly grant via Microsoft OAuth. We only access the data necessary to provide the features you use.
• Usage data: Information about how you interact with the Service, including AI chat history, tasks, and preferences you configure (such as your name, business name, and email sign-off style).
• Technical data: Standard server logs including IP address, browser type, and timestamps, collected for security and operational purposes.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service.
• Generate AI-powered email summaries, reply drafts, task suggestions, and calendar insights on your behalf.
• Authenticate your identity and maintain session security.
• Store your preferences and conversation history so you can continue past sessions.
• Monitor usage for billing, capacity planning, and abuse prevention.
• Respond to your support requests and communicate service updates.

3. AI Processing via UK and EU Hosting Providers

AssistOwl uses UK and EU AI hosting providers to power its AI features. All AI processing takes place within the United Kingdom and European Union, on infrastructure that meets GDPR requirements. When you ask the AI to summarise emails, draft replies, or analyse your calendar, relevant content from your connected accounts is sent to these providers for processing. We do not use your personal email or calendar content to train AI models.

4. Third-Party Services

We integrate with the following third-party services to provide the Service:

• Google (Gmail, Calendar, Drive): Access is granted through OAuth 2.0 with the scopes you approve. You can revoke access at any time in your Google Account settings.
• Microsoft (Outlook, Office 365, Hotmail): Access is granted through OAuth 2.0 with the scopes you approve. You can revoke access at any time in your Microsoft Account settings.
• UK and EU AI hosting providers: Used for AI language processing. All processing takes place within the UK and EU on GDPR-compliant infrastructure. Data sent is limited to what is necessary to fulfil your request and is not used for model training.
• Stripe, Inc. (Payment Processing): Subscription payments are processed by Stripe, Inc. When you subscribe to a paid plan, your payment details are submitted directly to Stripe and are never transmitted to or stored by AssistOwl. AssistOwl only receives and stores non-sensitive billing metadata such as your subscription plan and status. You can review Stripe's data practices in the Stripe Privacy Policy.
• Infrastructure providers: We use cloud hosting providers to store data securely. These providers are contractually bound to protect your data.

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

5. Google API Services User Data Policy

AssistOwl's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Limited Use disclosure

When you connect your Google account, AssistOwl accesses the following Gmail data:

• Message content and metadata (sender, recipient, subject, body, date) — used to display your inbox, generate AI summaries, draft reply suggestions, and run triage classification.
• Labels — used to reflect your inbox organisation and to apply archive or trash actions you trigger within AssistOwl.
• Send capability — used solely to send emails on your behalf when you explicitly click "Send" inside AssistOwl.

This data is used only to provide the features you explicitly requested within AssistOwl. Specifically, AssistOwl will not:

• Use Gmail data for advertising or allow advertisers to access it.
• Sell Gmail data or transfer it to third parties, except as necessary to provide the Service (e.g. sending email content to our UK and EU AI hosting providers for AI processing — see Section 3).
• Use Gmail data to train AI or machine learning models.
• Use Gmail data for any purpose unrelated to improving your experience within AssistOwl.

You can revoke AssistOwl's access to your Google account at any time via your Google Account settings or from the Connections section of the AssistOwl Settings panel.

6. Data Storage and Security

Your data is stored in encrypted databases. We use industry-standard security practices including HTTPS encryption for all data in transit and encrypted storage for data at rest. We apply technical and organisational measures appropriate to the sensitivity of the data we process, and we continually review and improve our security practices to guard against unauthorised access, loss, or misuse.

OAuth tokens used to access Google and Microsoft services are stored securely and are not shared with third parties beyond the intended integrations.

7. Data Retention

We retain your account data and conversation history for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate security purposes. Aggregated, anonymised analytics data may be retained indefinitely.

8. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated personal data.
• Portability: Request your data in a portable format where technically feasible.
• Revoke third-party access: Disconnect Google or Microsoft services at any time through your respective Google or Microsoft account settings, or through the AssistOwl settings panel.

To exercise any of these rights, contact us at the email address below.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated by email or by a prominent notice in the Service. Your continued use of the Service after changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: info@inforzone.com