Privacy Policy

What we collect, what we do with it, and what we never do. Each section opens with a summary — the paragraphs underneath are the part that binds.

Google data and Limited Use Terms of Service Trust centre

The “In short” line under each heading is a plain-language summary to help you read quickly. The paragraphs underneath are the definitive version.

Information we collect

In shortYour account details, and the content you connect.

We collect information you provide directly to us, such as when you create an account, use our services, or communicate with us. This includes your name, email address, organization details, and any content you upload or create within AiSU Strata.

How we use your information

In shortTo run the service and answer your questions. Nothing else.

We use the information we collect to provide, maintain, and improve our services, to communicate with you, and to personalize your experience. We process your documents using AI to enable intelligent search and knowledge management features.

Data security

In shortEncrypted in transit and at rest, audited regularly.

We take reasonable measures to help protect your personal information from loss, theft, misuse, and unauthorized access. All data is encrypted in transit and at rest. We implement enterprise-grade security controls and regularly audit our systems.

Data retention

In shortAs long as your account is active — and deleted whenever you ask.

We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your data at any time by contacting us or through your account settings.

Your rights

In shortAccess, correct, delete, object, restrict.

You have the right to access, correct, or delete your personal information. You may also object to or restrict certain processing of your data. To exercise these rights, contact us at the email below.

Google user data and Limited Use

In shortRead-only, on demand, never trained on, deleted when you disconnect.

The three scopes we request — all read-only

Google Drive file contentdrive.readonlyFetched on demand to answer the question you asked, with citations to the exact source.

Drive file metadatadrive.metadata.readonlyNames, folder paths and modification times, used to build a lightweight index so the assistant can locate the right document.

Gmail messagesgmail.readonlyOnly if you choose to connect Gmail. Fetched on demand, same as file content.

We request no write, send or delete permission of any kind.

What we store

We do not retain copies of your Drive files or your emails. We store only derived search data — semantic vectors, and file metadata such as names, paths and classifications — that is needed to provide the service.

What we share

To generate an answer, the specific excerpts relevant to your question are processed transiently by our AI subprocessors (Anthropic and OpenAI) under enterprise API terms that prohibit them from training models on this data or retaining it beyond transient processing. Google user data is never sold, never shared with data brokers or advertisers, and never used for advertising.

AI and machine-learning training

Raw or derived Google user data is not used to develop, improve or train any AI or machine-learning model, and our subprocessor agreements prohibit the same. Our use of data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Security

OAuth tokens are encrypted at rest. All data is encrypted in transit and at rest. Our infrastructure is hosted in the EU (Frankfurt).

Retention and deletion

Disconnecting a Google account in your connection settings immediately revokes our access, deletes the stored OAuth tokens and deletes the derived index entries for that account. Deleting your AiSU account removes all associated data.

Human access

We do not allow humans to read your Google user data, except with your explicit consent, where necessary for security purposes, or to comply with applicable law.

Contact us

In shortA person in Helsinki reads this inbox.

If you have any questions about this Privacy Policy, please contact us at privacy@aisuai.com.