Privacy Policy

Introduction

ChieflyAI ("ChieflyAI," "we," "our," or "us") provides an AI-powered productivity assistant that integrates with Google services such as Gmail, Google Calendar, and Google Drive. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, how we protect it, and the choices you have. It applies to our website at chieflyai.com and to the ChieflyAI product (collectively, the "Services").

If you do not agree with this policy, please do not use the Services.

Information We Collect

Information You Provide

• Account information: name, email address, and password or OAuth identifier.
• Billing information processed by our payment processor (we do not store full card numbers).
• Messages, prompts, and other content you submit to the Services or our contact form.

Google User Data We Access via Google APIs

When you connect a Google account, ChieflyAI requests OAuth scopes that allow us to access specific Google user data on your behalf. We only request the scopes necessary to provide the features you use. Depending on the features you enable, this may include:

• Gmail: message metadata (sender, recipients, subject, timestamps, labels), message bodies and attachments, and the ability to send, draft, or modify messages on your behalf.
• Google Calendar: calendar lists, events, attendees, and the ability to create, modify, or delete events on your behalf.
• Google Drive: file metadata and the contents of files you explicitly select or that are required for a requested action.
• Google profile: your name, email address, profile picture, and Google account ID for sign-in and account display.

You can review and revoke ChieflyAI's access at any time from your Google Account permissions page.

Information We Collect Automatically

• Browser type and version, device type, screen resolution, and timezone.
• Pages visited, session duration, and referrer information.
• General location information at the country or region level (derived from IP address).
• Diagnostic and error logs needed to operate and troubleshoot the Services.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the features you have requested.
• Authenticate you and secure your account.
• Respond to your inquiries and provide customer support.
• Analyze aggregate website traffic and usage patterns.
• Send service-related communications, and product updates if you opt in.
• Detect, prevent, and address fraud, abuse, and security incidents.
• Comply with legal obligations.

Google API Services User Data Policy — Limited Use

ChieflyAI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, ChieflyAI:

• Does not use Google user data for serving advertisements, including retargeting or personalized advertising.
• Does not sell Google user data, and does not transfer Google user data to data brokers, information resellers, or other parties who would resell or aggregate it.
• Does not use Google user data to train, fine-tune, or otherwise develop generalized or non-personalized AI/ML models. We send your content to third-party AI providers (see "Service Providers and Sharing" below) only to fulfill the specific request you have made, under contracts that prohibit those providers from using your data to train their models.
• Does not allow humans to read Google user data unless: (a) we have your affirmative agreement for specific messages; (b) it is necessary for security purposes such as investigating abuse; (c) it is necessary to comply with applicable law; or (d) the data has been aggregated and anonymized for internal operations.

Service Providers and Sharing

We do not sell, rent, or trade your personal information. We share information only as described below.

Sub-processors we use

• Vercel Inc. — website and application hosting, edge delivery, and platform analytics.
• Supabase Inc. — authentication, database, and storage for account and application data.
• Google LLC — OAuth and Google Workspace APIs (Gmail, Calendar, Drive) that you connect.
• AI model providers — we route content you submit (including, where required to fulfill your request, Google user data) to large-language-model providers such as Anthropic, OpenAI, and Google, under agreements that prohibit them from using your content to train their models or to serve advertising.

Other circumstances

• With your explicit consent.
• To comply with a valid legal process, court order, or government request, where we have a good-faith belief that disclosure is required.
• To protect the rights, property, or safety of ChieflyAI, our users, or the public.
• In connection with a merger, acquisition, or sale of assets, in which case we will notify you and any successor will be bound by this policy.

Data Retention and Deletion

We retain personal information only for as long as necessary to provide the Services and for the purposes described in this policy. Typical retention periods are:

• Account information: for the life of your account, then deleted within 90 days of account closure.
• Google user data cached for feature delivery: up to 30 days, then refreshed or deleted.
• Aggregate analytics: up to 24 months in anonymized form.
• Records we are required to keep by law (e.g., tax records): for the period required by law.

You can delete your account and request deletion of your personal data at any time by emailing privacy@chieflyai.com. We will confirm and complete deletion within 30 days, except where we are required to retain information by law. Disconnecting ChieflyAI from your Google Account revokes our future access to your Google user data.

Data Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS) and at rest, access controls, principle-of-least- privilege for engineering access, and logging and monitoring. No system is perfectly secure; if we become aware of a breach affecting your personal information, we will notify you and the appropriate authorities as required by law.

International Data Transfers

ChieflyAI operates in the United States and our sub-processors may process data in the United States, the European Union, and other jurisdictions. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) for cross-border transfers.

Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data.
• Object to or restrict the processing of your data.
• Request data portability.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with a data protection authority. EU and UK users may contact their local supervisory authority; California residents have rights under the CCPA/CPRA.

To exercise any of these rights, contact us at privacy@chieflyai.com.

Cookies and Local Storage

Our website uses local storage and a small number of strictly necessary cookies to enable sign-in, remember your preferences, and measure aggregate, privacy-preserving analytics (via Vercel Analytics). We do not use third-party advertising or cross-site tracking cookies.

Children's Privacy

The Services are not intended for children under 13 (or under 16 where local law sets a higher age). We do not knowingly collect personal information from such children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date and, where appropriate, by additional notice within the Services. Your continued use of the Services after the effective date constitutes acceptance of the revised policy.

Contact Us

For questions about this Privacy Policy or our data practices, or to exercise any of your rights, contact us at privacy@chieflyai.com.