SoterAI Google User Data Policy

Connecting is optional and is done one service at a time, from the Connectors panel or from a chat. SoterAI gets access only after you approve it on Google's consent screen, and only to the services you connect:

• Gmail: we read the messages and attachments you ask SoterAI to search, read or summarize, and we create drafts when you ask for one. SoterAI does not send, delete, label or change your email. Drafts stay in your Gmail Drafts folder until you review and send them yourself.
• Google Contacts: read-only. We look up names and email addresses in your contacts and other contacts when you ask SoterAI to find a person, for example to address a draft.
• Google Drive: read-only. We search for and read the files you ask about, including files in shared drives you can access, and export or download them so SoterAI can analyze them. SoterAI does not create, edit, share or delete Drive files.
• Google Calendar: read-only. We read your calendars, events and free or busy times when you ask about your schedule.
• Google Analytics: read-only. We run reports on the Analytics properties you name.
• Basic account information: your Google account email address and name, which we use to label the connection in SoterAI.

• SoterAI calls Google APIs only when you ask it to in a chat or a workflow. It does not sync or scan your Google account in the background.
• We use Google user data only to provide and improve the SoterAI features you use it with: answering your questions, summarizing and analyzing your content, and preparing drafts for you.
• We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models, and the AI model providers we use do not train their models on it.
• People at Soter do not read your Google user data unless you give us explicit permission for specific content (for example, when you ask our support team to look at a conversation), it is necessary for security purposes such as investigating abuse, it is needed to comply with applicable law, or it has been aggregated and anonymized for internal operations.

We share Google user data only with the service providers on our subprocessor list in the SoterAI Privacy Policy, and only so they can provide SoterAI to you.

These providers act only on our instructions, under contracts that limit their use of the data to providing their service to us, and may not use it for their own purposes. Within Soter, Google user data is processed only by Soter Analytics Inc. (United States), Soter Analytics Ltd (United Kingdom) and Soter Analytics Pty Ltd (Australia), the companies that provide SoterAI.

We do not share, transfer or disclose Google user data to anyone else, except:

• when you ask us to, or when you make it available to others yourself, for example by adding it to a record other members of your workspace can see;
• to comply with applicable law, regulation, legal process or an enforceable government request;
• to protect the security of SoterAI and its users, for example to investigate abuse or a security incident;
• as part of a merger, acquisition or sale of assets, and only after we have obtained your explicit prior consent.

We never sell Google user data, use it for advertising (including personalized, retargeted or interest-based advertising), give it to data brokers or information resellers, use it to determine creditworthiness or for lending purposes, or make it available to other SoterAI customers.

• Your Google OAuth tokens are stored encrypted by Composio. SoterAI's own systems do not store them.
• Google user data that SoterAI retrieves for a request is saved in that conversation in your SoterAI workspace, so you can see the answer and its sources later. Files that SoterAI downloads from Google Drive for you are saved as files in your workspace.
• Google user data is encrypted in transit and at rest and is not visible to other SoterAI customers. Access to production systems is limited to authorized Soter staff.

• You can disconnect a Google service at any time from the Connectors panel in SoterAI. This deletes the connection and its tokens at Composio and stops all further access. You can also remove SoterAI's access from your Google Account at myaccount.google.com/connections.
• Conversations that contain Google user data are kept until you delete them or your workspace is deleted. Files saved from Google Drive are kept until you delete them from your workspace. In all other respects we keep data as described in the Data Retention section of the SoterAI Privacy Policy.
• Copies in the logs of our AI gateway (Portkey) and agent tracing service (LangSmith) are deleted automatically when their retention period ends.
• To ask us to delete Google user data we hold about you, email info@soteranalytics.com.

If we change how we use, store or share Google user data, we will update this policy and notify you in SoterAI or by email before the change takes effect, and ask for your consent where the law or Google's policies require it.

SoterAI's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Questions about this policy or about Google user data in SoterAI: info@soteranalytics.com