Privacy Policy
Last Updated: May 25, 2026
Google API Limited Use Compliance
Operyn's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
1. Introduction
Operyn ("we", "our", or "us") provides an autonomous AI executive assistant designed to help users streamline their daily workflows by organizing tasks, categorizing unread emails, scheduling calendar events, and drafting reply context.
We are committed to maintaining the highest standards of data security and user privacy. This policy describes how we access, collect, process, and protect your Google User Data.
2. How We Access and Use Google User Data
Operyn requests authorization to connect to your Gmail and Google Calendar accounts via OAuth 2.0. We request only the minimum scopes necessary to operate our services:
We request read access (`gmail.readonly`) to scan unread emails in your mailbox and fetch details. We request modify/compose permissions (`gmail.modify`, `gmail.compose`) strictly to save draft replies in your "Drafts" folder and to mark processed emails as read. We never send emails on your behalf without your explicit approval.
We request read access (`calendar.readonly`) to cross-reference upcoming schedules and avoid duplicate bookings or highlight timing conflicts. We request write access (`calendar.events`) strictly to insert new events or meetings extracted from email threads into your Google Calendar.
3. Data Protection and Encryption
Your security is our absolute priority. We employ advanced cryptographic protections to keep your data secure:
- Encrypted OAuth Tokens: All Access and Refresh tokens obtained during OAuth login are encrypted in our Postgres database using industry-grade AES-256-GCM.
- No Email Storing: We do not store your email bodies, subjects, or sender names permanently. They are processed dynamically in-memory within our secure runtime environment and passed to the AI model to yield task configurations. Only the high-level summaries of successfully completed runs are stored in logs.
- No Data Sharing or Ad Targeting: Your Google User Data is never used for advertising, nor is it transferred or sold to any third-party brokers. It is used exclusively to power the executive AI assistant capabilities you enable.
4. Deletion and Account Revocation
You maintain total control over your connected accounts. You can disconnect your Gmail or Google Calendar integrations at any time directly through the Settings screen in the Operyn dashboard.
Disconnecting an integration instantly and permanently deletes the corresponding encrypted access and refresh tokens from our database, completely terminating our access.
Notice on Third-Party AI Engine
Operyn uses Gemini API endpoints (provided by Google Cloud AI SDK) to categorize emails, extract action items, and draft replies. The data passed to the model includes only the content of the emails being processed. This data is handled in accordance with the standard API terms and is not used to train Google's generative models.
5. Contact Us
If you have any questions, feedback, or data deletion requests regarding this Privacy Policy, please contact our support team at:
support@operyn.com