Privacy Policy

We collect information in the following ways:

Account Information. When you create an account, we collect your name, email address, password, and optional profile details such as your job title, avatar, and timezone.

Workspace Data. Information you and your team create within Kavanah, including projects, tasks, comments, files, messages, and client records. This data is stored to provide the Service and is owned by your workspace.

Usage Data. We automatically collect information about how you interact with the Service, including pages visited, features used, browser type, device information, IP address, and referring URLs.

Cookies & Similar Technologies. We use cookies, local storage, and similar technologies to maintain sessions, remember preferences, and understand usage patterns. You can control cookies through your browser settings.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate users and manage account access
• Send transactional communications (e.g., password resets, notifications)
• Respond to support requests and communicate with you about the Service
• Analyze usage patterns to improve performance and user experience
• Detect, prevent, and address security issues and abuse
• Comply with legal obligations

We do not sell your personal information. We may share information in the following circumstances:

Within Your Workspace. Other members of your workspace can see your profile information and workspace activity as part of normal collaboration.

Service Providers. We work with third-party providers for hosting, analytics, email delivery, and payment processing. These providers access your data only to perform services on our behalf and are contractually obligated to protect it.

Legal Requirements. We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of Kavanah, our users, or the public.

Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

If you connect a Google account (for example Gmail, Google Calendar, Google Drive, Docs, Sheets, Slides, Forms, Tasks, Meet, Chat or Workspace Admin), Kavanah accesses only the Google data needed for the features you choose to use, under the permissions you grant on Google's consent screen.

What we access and why. We use Google user data only to provide and improve user-facing features of the Service that you request: showing and summarizing your email and calendar, letting the Kavanah AI assistant answer questions about and act on your messages, events and files when you ask it to, sending or drafting email on your behalf, importing files you select into your workspace, and creating or editing Google documents, spreadsheets, presentations, forms and tasks at your direction.

AI processing. To answer a request, the relevant Google data may be sent to the AI model provider that powers the assistant (Anthropic, or — if your workspace selects a different model — the provider of that model via OpenRouter) solely to generate a response for you. We do not use Google user data to develop, improve or train generalized or non-personalized AI or machine learning models, and we send it only to model providers that do not use it to train their models.

Storage. OAuth tokens are encrypted at rest. We store message and event identifiers and envelope details (such as sender, labels and timestamps) to power your inbox, notifications and activity history, and we store content you bring into your workspace (for example an imported file or an assistant conversation) as workspace data.

Sharing. We do not sell Google user data, use it for advertising, or use it to determine creditworthiness. We do not transfer it to anyone except as necessary to provide or improve the features described above, to comply with applicable law, for security purposes, or as part of a merger or acquisition. No person at Kavanah reads your Google data unless you give us permission for specific content, it is necessary for security purposes or to comply with applicable law, or it is aggregated and anonymized for internal operations.

Your control.You can disconnect a Google account at any time in Settings → Integrations, which deletes the stored tokens and stops all further access; you can also revoke access at myaccount.google.com/permissions. To have Google-derived data deleted from Kavanah, email privacy@kavanah.ai and we will delete it within 30 days.

Kavanah's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as resolving disputes.

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, role-based access controls, and regular security assessments. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Export your workspace data in a portable format
• Opt out of non-essential communications
• Restrict or object to certain processing activities
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at the email address listed below. We will respond to your request within 30 days.

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and compliance with applicable data protection frameworks.

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@kavanah.ai