Privacy Policy
We believe in plain language. Here is a clear breakdown of what data we collect, why we collect it, and how we protect it when you use Synced.
1. Overview
Synced ("we," "our," or "us") is an AI inbox assistant that helps users search connected messages and files, draft replies, coordinate calendars, and manage follow-ups. When you choose to connect Google services, Synced accesses only the data needed to provide the features you enable. This Privacy Policy explains what we access, how we use it, and the controls available to you.
2. Information We Collect and Access (Data Access)
We request the minimum information needed to provide Synced's inbox, scheduling, search, drafting, and follow-up features. The information available to Synced depends on the services and permissions you choose to enable. Specifically:
- Account Authentication & Profile Details: When you sign up via Google OAuth, we collect your primary email address (
userinfo.email) and profile information (userinfo.profile) to authenticate your identity, secure your login, and set up your workspace profile. - Calendar Information (Read & Write): If you connect your Google Calendar (using the
.../auth/calendarscope), we retrieve calendar availability to find conflict-free meeting times, and create or modify calendar events per your request. Write access is necessary for the app's core feature of scheduling and updating meetings. - Contacts Information (Read-only): If you connect your contacts (using the
.../auth/contacts.readonlyand.../auth/contacts.other.readonlyscopes), we retrieve your contacts via the People API to automatically autocomplete and fill invitee email addresses when scheduling meetings or sending invites. - Drive Files (Read-only): If you authorize access to Google Drive (using the
.../auth/drive.readonlyscope), our AI assistant searches your Drive files to locate relevant existing materials and reads or extracts content from them to answer your queries or compile context for your tasks. - Email Communications (Gmail Read & Write): If you connect your Gmail account (using the
.../auth/gmail.readonlyand.../auth/gmail.modifyscopes), our system searches messages and retrieves message details/headers to compile context, summarize email threads, and answer your questions. We also use these scopes to create draft replies and send emails, with each draft requiring your explicit approval before sending.
Google Workspace API Limited Use Disclosure
Synced’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
3. How We Use and Share Google User Data (Data Use, Transfer, and AI/ML Training Restrictions)
We process, use, and transfer raw, derived, or aggregated/anonymized Google user data strictly to deliver and improve the user-facing features of the Synced platform. We adhere to the following strict guardrails:
- Data Use: We use Google user data solely to enable critical app services: authenticating your profile, finding conflict-free meeting times on your calendar, scheduling and modifying calendar events, autocompleting recipient contacts, summarizing emails, and enabling our AI assistant to answer your questions using context from your Google Drive and Gmail.
- Prohibited Data Use: Raw, derived, or aggregated/anonymized Google user data is never used for any purpose other than to provide or improve user-facing features. Any use of this data for targeted advertising, serving ads, or lending purposes is strictly prohibited.
- Data Transfer & Types of Parties Shared With: We only share or transfer raw, derived, or aggregated/anonymized Google user data with third-party service providers (such as secure cloud hosting and database providers like Google Cloud Firebase/Firestore, and LLM processing APIs like OpenAI or Anthropic) as necessary to execute the app's user-facing services. These third parties are bound by strict confidentiality agreements and developer terms that prohibit them from using or retaining your data for any other purposes, including training their own AI models.
- Prohibited Data Transfer: Transfer or sale of raw, derived, or aggregated/anonymized Google user data to data brokers, advertisers, ad networks, or any other third parties for purposes other than providing or improving our service is strictly prohibited.
- AI/ML Model Training Restrictions: We strictly prohibit using raw, derived, or aggregated/anonymized Google Workspace APIs user data (including email contents, calendar entries, files, or contacts) to develop, improve, or train any generalized Artificial Intelligence (AI) or Machine Learning (ML) models. No data received from Workspace APIs will be transferred to third-party services that use it for their own model training.
- Limited Human Access: Our developers and employees do not access or read your Google user data (calendar events, emails, files, or contacts) unless you explicitly request support to debug a specific issue, you provide written consent, or it is necessary for security investigations (such as detecting abuse or responding to malware).
4. Data Security & Storage (Data Protection)
We are committed to securing and protecting your Google user data. All credentials, tokens, and synced metadata (such as deadline events and email logs) are encrypted in transit using industry-standard TLS protocols and encrypted at rest within our secure databases. We employ strict firewalls, continuous vulnerability logging, and restricted access controls to prevent unauthorized access and ensure your Google user data is protected against loss, misuse, or alteration.
5. User Controls, Retention, and Deletion (Data Retention & Deletion)
You are in full control of your integrations, credentials, and data at all times:
- Data Retention Policy: We retain account data, authorization tokens, and cached service data only while your Synced account is active or for as long as needed to provide the features you enable, meet legal obligations, resolve disputes, and protect the Service.
- Revoking Access: You can disconnect your Google Calendar or Gmail account at any time directly in your Synced settings. Alternatively, you can revoke Synced's access to your Google account via the Google Security Settings page.
- Data Deletion Policy & Practice: If you close your account or submit a request for data deletion, all associated stored tokens, credentials, and cached calendar or email records will be permanently and securely deleted from our servers and databases within 30 days.
6. Contact Us
If you have questions about this Privacy Policy, your data rights, or how to delete your account, please email us directly: