How The Contractor AI Uses Google User Data

The Contractor AI ("the app") connects to your Google Account only after you explicitly authorize it, and uses that access solely to provide the app's features to you.

What we access

Gmail — read only (gmail.readonly): we read the content of your email messages so the app's AI assistant can summarize project-related emails and extract job details when you ask. We never send, modify, or delete email.

Google Drive — read only (drive.readonly): we read the files in the specific Drive folder you select so the assistant can use those documents to answer questions and produce deliverables grounded in your own files.

Google Drive files created by the app (drive.file): we create and update only the files the app itself generates (e.g., branded documents) in your selected folder. This permission cannot access any other files in your Drive.

Basic identity (openid, email): we read your Google account email address to identify the connected account.

How we use it Google user data is used only to provide and improve the user-facing features above — email summaries, document search, and document generation — for the account that connected it. To generate these results, the relevant content is sent to our AI processing provider (Anthropic) solely to produce your requested output. We do not use Google user data for advertising, credit or lending decisions, or any purpose unrelated to these features.

How we share or transfer it We do not sell Google user data. We do not transfer it to third parties except: (a) our AI processing provider (Anthropic), which processes the data only to generate your requested output and does not use it to train its models; and (b) where required by law. We never transfer Google user data to data brokers or advertisers, or to any party for their own purposes.

AI/ML use We do not use Google Workspace data to develop, improve, or train generalized AI/ML models, and we do not transfer it to any third-party AI service that would use it to train its models.

How we protect it OAuth access and refresh tokens are encrypted at rest (AES-256-GCM) and all data is transmitted over TLS. Access is scoped to the connecting account, and only authorized users of that account can view the results.

Retention & deletion Documents you sync from Google Drive are stored so the assistant can reference them, and are retained until you delete them or disconnect the integration. Email content is accessed on demand to fulfill your requests and is not retained as a separate dataset; excerpts may appear in output you generate, which is stored with your account until you delete it. You can disconnect Google at any time from the app's Connections (Toolbox) page, which removes the stored authorization. To request deletion of data associated with your account, contact [email protected].

Limited Use The Contractor AI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.