Privacy Policy

Information We Collect

Depending on how you use the Service, we may collect:

• account and contact information, such as your name, email address, organization, and support communications;
• content you provide, including prompts, instructions, messages, uploaded files, agent memory, and outputs;
• authorization information, including OAuth tokens and the permissions associated with connected services;
• information from services you choose to connect, as described below; and
• technical and usage information such as IP address, browser or device information, timestamps, diagnostic records, feature use, and security logs.

Google User Data We Access

When you authorize Winwaiv Personal Agent to connect to your Google account, the Service may request access to information associated with the Google services required for the features you choose to use.

Depending on the features you enable, this may include:

• your Google account identifier and basic profile information, such as your name and email address;
• Google Drive
• Google Docs
• Google Sheets
• Gmail
• Google Calendar

The specific permissions requested are displayed to you during the Google authorization process.

We only request access to Google user data that is necessary to provide the functionality you choose to use. The data actually accessed depends on your instructions, enabled features, granted scopes, and the content available in your account.

How We Use Google User Data

Google user data accessed by Winwaiv Personal Agent is used only to provide or support the user-facing functionality requested by the user or organization, keep the Service secure, troubleshoot the Service, and comply with law.

For example, an application may access Google data in order to:

• locate or retrieve a document requested by the user;
• read or update information in an authorized Google Sheet;
• create or modify an authorized Google document;
• retrieve calendar information or create calendar events;
• read, prepare, or send email when explicitly requested or authorized;
• allow an AI assistant or automation to perform an action requested by the user.

Access to Google user data is not used for advertising, retargeting, personalized advertising, or creating marketing profiles. We do not allow humans to read Google user data unless you have given affirmative permission for support or troubleshooting, access is necessary for security purposes, access is required to comply with applicable law, or the data has been aggregated and anonymized for internal operations in a manner that cannot identify you.

Artificial Intelligence and Machine Learning

Google Workspace API data is not used to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models.

Where AI functionality is used to provide a requested service, relevant information may be sent to and processed by the AI model or infrastructure providers used to fulfill that request, subject to the permissions granted by the user, our agreements with those providers, and the data-handling practices described in this policy.

Data Storage

The Service may temporarily store information obtained through Google APIs when necessary to provide the requested service, maintain application state, retain agent memory you have enabled, or support authorized workflows.

Where persistent storage is required, we limit storage to information reasonably necessary for the operation of the service.

OAuth credentials, tokens, and other authentication information are protected using appropriate technical safeguards and are retained only while needed to keep your authorized connection active, unless a longer period is required by law or for security.

Sharing of Information

Winwaiv does not sell Google user data or other personal information.

We do not transfer, disclose, or share Google user data with third parties except where necessary to:

• provide the application or service requested by the user;
• use infrastructure, AI model, hosting, security, or other service providers required to operate the Service;
• comply with applicable law or a valid legal requirement; or
• protect the security and integrity of our systems.

Where service providers process information on our behalf, their access is limited to what is necessary to provide their services.

Other Uses of Information

We may use account, content, technical, and usage information to provide and administer the Service; authenticate users; respond to requests; maintain agent settings and memory; detect abuse and security incidents; diagnose problems; meet legal obligations; and improve the reliability and user-facing functionality of the Service.

We may use information that has been aggregated or de-identified so that it cannot reasonably identify you for analytics, security, and service improvement.

Google API Services User Data Policy

Winwaiv's use and transfer to any other application of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

User Control and Revocation

You can revoke Winwaiv Personal Agent's access through your Google Account third-party connections settings. Revocation stops future access but does not automatically delete information already processed or stored by the Service.

You may contact Winwaiv to request access to, correction of, or deletion of personal information and Google user data maintained by us, or to close your account, subject to applicable legal and contractual requirements. We will take reasonable steps to delete or de-identify applicable information from active systems and allow routine backup copies to expire, unless retention is required for legal, fraud-prevention, security, or legitimate record-keeping purposes.

Data Retention

We retain personal information only for as long as reasonably necessary to provide the Service, maintain an authorized agent or connected account, meet legal and contractual obligations, resolve disputes, and protect the Service. Retention periods vary based on the type of information, the features you use, your settings and instructions, and applicable requirements.

When an account or connection is closed, authentication tokens are deleted or invalidated within a reasonable period, subject to security logs, backups, and legal retention requirements.

Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration.

No system can guarantee absolute security, but we take appropriate measures based on the nature of the information and the services being provided.

International Processing

Winwaiv and its service providers may process information in Canada, the United States, or other countries where they operate. Those locations may have data-protection laws different from those where you live. Where required, we use appropriate safeguards for cross-border processing.

Children's Privacy

The Service is not directed to children under 13 and is intended for people who have reached the age required to consent to the processing of their personal information in their jurisdiction. We do not knowingly collect personal information from children in violation of applicable law. Contact us if you believe a child has provided information improperly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or data-handling practices.

The current version will be published on this page together with the date of the most recent update.

Contact

If you have questions about this Privacy Policy or how Winwaiv handles personal information, please contact: