Privacy Policy

Last updated: 16 October 2026

Introduction

ChieflyAI ("ChieflyAI," "we," "our," or "us") provides an AI-powered productivity assistant that integrates with Google services such as Gmail, Google Calendar, and Google Drive, and with other business tools you choose to connect, such as a Facebook Page. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, how we protect it, and the choices you have. It applies to our website at chieflyai.com and to the ChieflyAI product (collectively, the "Services").

If you do not agree with this policy, please do not use the Services.

Information We Collect

Information You Provide

  • Account information: name, email address, and password or OAuth identifier.
  • Billing information processed by our payment processor (we do not store full card numbers).
  • Messages, prompts, and other content you submit to the Services or our contact form.

Google User Data We Access via Google APIs

When you connect a Google account, ChieflyAI requests OAuth scopes that allow us to access specific Google user data on your behalf. We only request the scopes necessary to provide the features you use. Depending on the features you enable, this may include:

  • Gmail: message metadata (sender, recipients, subject, timestamps, labels), message bodies and attachments, and the ability to send, draft, or modify messages on your behalf.
  • Google Calendar: calendar lists, events, attendees, and the ability to create, modify, or delete events on your behalf.
  • Google Drive: file metadata and the contents of files you explicitly select or that are required for a requested action.
  • Google profile: your name, email address, profile picture, and Google account ID for sign-in and account display.

You can review and revoke ChieflyAI's access at any time from your Google Account permissions page.

Facebook Page Data

An Owner or Admin of a ChieflyAI workspace can connect one Facebook Page that they manage, so that ChieflyAI can show how the Page and its posts are performing. ChieflyAI only reads this data: it never posts, comments, messages, or moderates on your behalf. With your permission, we access:

  • The list of Pages you manage, so you can choose which one to connect. We keep only the Page you choose.
  • The Page's own published posts: the text, date, type, link to the post on Facebook, one picture per post, and each post's reaction, comment, and share counts.
  • Page and post insights: numbers such as views, viewers, followers, clicks, and reactions by type.
  • Connection details: the Page's name and ID, your Facebook user ID, the permissions you granted, and the access tokens Facebook issues, which we store encrypted.

We do not read comment text, who reacted to or commented on a post, posts by visitors to the Page, ratings, private messages, or advertising data. Comments appear in ChieflyAI only as a count per post.

We use Facebook data only to provide the features your workspace uses: the posts library, the Page and post performance reports, and answers from ChieflyAI's assistants about your marketing. We do not sell it, use it for advertising, or use it to train AI models, and we share it only as described in this policy. You can remove ChieflyAI's access at any time from your Facebook Business Integrations settings.

Information We Collect Automatically

  • Browser type and version, device type, screen resolution, and timezone.
  • Pages visited, session duration, and referrer information.
  • General location information at the country or region level (derived from IP address).
  • Diagnostic and error logs needed to operate and troubleshoot the Services.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the features you have requested.
  • Authenticate you and secure your account.
  • Respond to your inquiries and provide customer support.
  • Analyze aggregate website traffic and usage patterns.
  • Send service-related communications, and product updates if you opt in.
  • Detect, prevent, and address fraud, abuse, and security incidents.
  • Comply with legal obligations.

Google API Services User Data Policy — Limited Use

ChieflyAI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, ChieflyAI:

  • Does not use Google user data for serving advertisements, including retargeting or personalized advertising.
  • Does not sell Google user data, and does not transfer Google user data to data brokers, information resellers, or other parties who would resell or aggregate it.
  • Does not use Google user data to train, fine-tune, or otherwise develop generalized or non-personalized AI/ML models. We send your content to third-party AI providers (see "Service Providers and Sharing" below) only to fulfill the specific request you have made, under contracts that prohibit those providers from using your data to train their models.
  • Does not allow humans to read Google user data unless: (a) we have your affirmative agreement for specific messages; (b) it is necessary for security purposes such as investigating abuse; (c) it is necessary to comply with applicable law; or (d) the data has been aggregated and anonymized for internal operations.

Service Providers and Sharing

We do not sell, rent, or trade your personal information. We share information only as described below.

Sub-processors we use

  • Vercel Inc. — website and application hosting, edge delivery, and platform analytics.
  • Supabase Inc. — authentication, database, and storage for account and application data.
  • Google LLC — OAuth and Google Workspace APIs (Gmail, Calendar, Drive) that you connect.
  • Meta Platforms, Inc. — Facebook Login and the Facebook Graph API, used to read the Facebook Page you connect.
  • AI model providers — we route content you submit (including, where required to fulfill your request, Google user data and Facebook Page data) to large-language-model providers such as Anthropic, OpenAI, and Google, under agreements that prohibit them from using your content to train their models or to serve advertising.

Other circumstances

  • With your explicit consent.
  • To comply with a valid legal process, court order, or government request, where we have a good-faith belief that disclosure is required.
  • To protect the rights, property, or safety of ChieflyAI, our users, or the public.
  • In connection with a merger, acquisition, or sale of assets, in which case we will notify you and any successor will be bound by this policy.

Data Retention and Deletion

We retain personal information only for as long as necessary to provide the Services and for the purposes described in this policy. Typical retention periods are:

  • Account information: for the life of your account, then deleted within 90 days of account closure.
  • Google user data cached for feature delivery: up to 30 days, then refreshed or deleted.
  • Facebook Page data: posts and numbers from the most recent 24 months, refreshed daily, for as long as the Page stays connected. Older posts drop out of the window.
  • Aggregate analytics: up to 24 months in anonymized form.
  • Records we are required to keep by law (e.g., tax records): for the period required by law.

You can delete your account and request deletion of your personal data at any time by emailing privacy@chieflyai.com. We will confirm and complete deletion within 30 days, except where we are required to retain information by law. Disconnecting ChieflyAI from your Google Account revokes our future access to your Google user data.

Deleting Your Facebook Data

You can have ChieflyAI delete the data it holds from Facebook in either of these ways:

  • In ChieflyAI: go to Settings → Integrations, open the Facebook card, and choose Disconnect.
  • In Facebook: open your Business Integrations settings, remove ChieflyAI, and choose to request deletion. Facebook sends us the request, and gives you a confirmation code and a link where you can check its progress.

Either way, we delete the Page's posts, pictures, numbers, and the reports made from them, and clear the stored access tokens. Deletion starts straight away, usually finishes within an hour, and always finishes within 30 days. If someone else in your workspace has since connected the same Page with their own Facebook account, a request from you clears your own connection details, and the Page data held under their connection stays until they disconnect it. You can also email privacy@chieflyai.com to request deletion.

Data Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS) and at rest, access controls, principle-of-least- privilege for engineering access, and logging and monitoring. No system is perfectly secure; if we become aware of a breach affecting your personal information, we will notify you and the appropriate authorities as required by law.

International Data Transfers

ChieflyAI operates in the United States and our sub-processors may process data in the United States, the European Union, and other jurisdictions. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) for cross-border transfers.

Your Rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your personal data.
  • Object to or restrict the processing of your data.
  • Request data portability.
  • Withdraw consent at any time where processing is based on consent.
  • Lodge a complaint with a data protection authority. EU and UK users may contact their local supervisory authority; California residents have rights under the CCPA/CPRA.

To exercise any of these rights, contact us at privacy@chieflyai.com.

Cookies and Local Storage

Our website uses local storage and a small number of strictly necessary cookies to enable sign-in, remember your preferences, and measure aggregate, privacy-preserving analytics (via Vercel Analytics). We do not use third-party advertising or cross-site tracking cookies.

Children's Privacy

The Services are not intended for children under 13 (or under 16 where local law sets a higher age). We do not knowingly collect personal information from such children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date and, where appropriate, by additional notice within the Services. Your continued use of the Services after the effective date constitutes acceptance of the revised policy.

Contact Us

For questions about this Privacy Policy or our data practices, or to exercise any of your rights, contact us at privacy@chieflyai.com.