1. Introduction
InnDesk ("we", "us", or "our") operates the InnDesk AI workspace available at inndesk.ai and related domains (collectively, the "Service"). This Privacy Policy explains how we collect, use, store, share, and protect information when you use the Service.
If you do not agree with this Privacy Policy, please do not use the Service.
2. Information We Collect
We collect information in the following ways:
- Account information: name, email address, authentication identifiers, and subscription status when you register or sign in.
- Google account information: when you choose "Sign in with Google" or authorize Google integrations, we receive information from Google such as your Google account ID, email address, and basic profile information permitted by the scopes you approve.
- Google API data: when you authorize optional Google permissions (for example Calendar, Gmail, Drive, or Sheets), we access only the Google data needed to perform the feature you request.
- User content: files, messages, prompts, and other content you upload or create while using the Service.
- Usage and technical data: log data, device/browser type, IP address, timestamps, and diagnostic information used to secure and improve the Service.
- Payment information: if you subscribe to a paid plan, payment processing is handled by our payment provider (Stripe). We do not store full payment card numbers on our servers.
3. Google User Data
InnDesk uses Google OAuth so you can sign in and, when you choose, connect Google services to automation tools inside the product.
We access Google user data only after you explicitly grant permission. The data we may access depends on the scopes you approve, including:
- Basic profile and email (openid, email, profile) for authentication and account management.
- Google Calendar data to read or create events for calendar-related tools.
- Gmail data to read or send messages only when you use features that require email automation.
- Google Drive and Google Sheets data to create or update files when you use spreadsheet or file automation tools.
4. How We Use Information
We use the information we collect to:
- Provide, operate, maintain, and improve the Service.
- Authenticate users and manage accounts.
- Perform the specific Google-integrated features you request.
- Process subscriptions and provide customer support.
- Monitor security, prevent fraud and abuse, and comply with legal obligations.
- Communicate with you about service updates, security notices, and support requests.
5. Google API Services User Data Policy
InnDesk's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, Google user data obtained through Google APIs is used only to provide or improve user-facing features that are visible in the InnDesk product, is not used for advertising, is not sold to third parties, and is not transferred to third parties except as necessary to provide the Service (such as secure cloud hosting) or as required by law.
We do not use Google user data obtained through Google Workspace APIs to train, fine-tune, or improve any AI or machine learning models. Google user data is used only to provide user-requested features within the Services.
6. How We Share Information
We do not sell your personal information. We may share information only in these limited circumstances:
- Service providers: trusted vendors that help us operate the Service (for example cloud hosting, payment processing, email delivery, and monitoring), subject to confidentiality and security obligations.
- Legal requirements: when required by law, regulation, legal process, or governmental request.
- Business transfers: in connection with a merger, acquisition, or sale of assets, with notice where required by law.
- With your direction: when you explicitly request or authorize a disclosure.
7. Data Retention
We retain information only for as long as necessary to provide the Service and fulfill the purposes described in this policy.
Uploaded files used for processing are generally retained for up to 7 days and then deleted automatically, unless a longer retention period is required for a specific feature you use or by law.
Google OAuth tokens are stored so connected features continue to work until you disconnect the integration or delete your account. You may revoke Google access at any time through your Google Account settings.
8. Data Security
We use administrative, technical, and organizational safeguards designed to protect your information, including encrypted transmission (HTTPS/TLS), access controls, and monitoring.
No method of transmission or storage is completely secure. While we work to protect your data, we cannot guarantee absolute security.
9. Your Choices and Rights
Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information.
You can revoke InnDesk's access to your Google account at any time via your Google Account permissions page at https://myaccount.google.com/permissions.
You may request account deletion or data-related assistance by contacting us at [email protected].
10. Children's Privacy
The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children.
11. International Data Transfers
Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date. Material changes may also be communicated through the Service or by email where appropriate.
13. Contact Us
If you have questions about this Privacy Policy or our handling of Google user data, contact us at:
InnDesk — Email: [email protected] — Website: https://inndesk.ai