Google Limited Use
Elani's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
Human Review
We do not allow humans to read your Google user data (such as email content or calendar events) unless:
- We have first obtained your affirmative agreement to view specific data.
- It is necessary for security purposes (such as investigating a bug or abuse).
- It is necessary to comply with applicable law.
- The data has been aggregated and anonymized for internal operations in accordance with applicable privacy and other jurisdictional legal requirements.
Information We Collect
We collect the following types of information when you use the Service:
- Account and onboarding data. Email address, display name, time zone, calendar ID, and personalization notes you provide during setup or in settings.
- OAuth credentials. A Google OAuth refresh token stored in our database to access Gmail, Calendar, and Contacts. Access tokens are generated as needed and cached temporarily in memory. We do not store your Google password.
- Email content and metadata. Email headers (from, to, cc, subject, message IDs), thread IDs, snippets, body previews, and conversation history used to draft replies, maintain threads, send alerts, and generate briefings. We may retrieve full message bodies or attachment text when needed to fulfill your request.
- Calendar data. Event titles, times, attendees, locations, and descriptions used to generate briefings, schedule meetings, and detect conflicts.
- Contacts. Names, emails, and phone numbers retrieved when you ask Elani to look someone up. We may store contact details when they are referenced in tasks, insights, or research notes.
- Tasks, insights, and research. Task summaries, classifications, alert timings, context snippets, and research notes stored to power alerts and briefings.
- Web search and URL data. Search queries and URL content processed when you ask Elani to search the web or analyze a link.
- Usage and diagnostics. Logs and error reports that may include timestamps, request IDs, and in some cases message metadata or snippets to help troubleshoot issues.
How We Use Information
We use the information we collect to provide and improve user-facing features that are prominent in our interface. This includes:
- Providing the Service, including drafting replies, scheduling, briefings, and alerts.
- Maintaining conversation history, task tracking, and personalization for continuity.
- Operating, securing, and monitoring the Service, including debugging and abuse prevention.
- Communicate with you about updates or support requests.
AI Processing
Elani uses Google Gemini models (via Cloudflare AI Gateway) to generate drafts, classifications, and briefings. Relevant email, calendar, task, and contact data may be sent to these providers to produce responses. When you use features like web search, URL analysis, or code execution, the relevant queries, URLs, and code prompts are sent to Google to perform the requested action. We do not train our own models on your content, and our providers handle data according to their policies.
How We Share Information
We share your information only as necessary to provide or improve the Service, or as required by law. We share data with:
- Cloudflare (Workers, D1, KV, Queues, AI Gateway) for hosting, storage, caching, and AI routing.
- Google (OAuth, Gmail, Calendar, Contacts, Gemini) to access your data, perform web searches, analyze URLs, and generate AI responses.
- Mailgun to send emails on your behalf and deliver briefings or alerts.
- Slack (if configured) to send email subjects or previews to your designated notification channel.
- Axiom, Honeycomb, and PostHog for logging, monitoring, and diagnostics.
We do not sell your personal information. We do not transfer or sell Google user data to third parties like advertising platforms, data brokers, or information resellers. We do not use Google user data for serving advertisements, including retargeting or interest-based advertising. We do not use or transfer Google user data to determine credit-worthiness or for lending purposes.
We only transfer Google user data to third parties as part of a merger, acquisition, or sale of assets after obtaining your explicit prior consent.
Data Retention
We keep account data, stored conversation history, tasks, and metadata while your account is active. Logs and diagnostics may be retained for a limited period for security and reliability. We retain cached access tokens only in memory and short-lived AI session caches in KV. You can request deletion by contacting us.
Your Choices
- Update your personalization or settings through the Service.
- Stop email forwarding or revoke Google access at any time.
- Request deletion by emailing privacy@elani.ai.
Security
We use reasonable technical and organizational safeguards to protect information in transit and at rest. No method of transmission or storage is completely secure.
Children's Privacy
Elani is not directed to children under 13, and we do not knowingly collect personal information from children.
Changes
We may update this policy from time to time. The "Last updated" date indicates when changes were made.
Contact
Questions or requests? Email us at hello@elani.ai.