Privacy Policy

1. Google Account Information

When you sign in with Google OAuth, we collect:

• Email address – Your primary Gmail address
• Profile information – Name and profile picture
• Google ID – Unique identifier for your Google account

2. Gmail Data

To provide email management services, we access:

• Email metadata – Subject lines, sender/recipient information, timestamps, labels, and thread IDs
• Email body content – Message content is fetched on-demand from Gmail API and processed transiently; we do not permanently store full email bodies
• Email snippets – Short previews (first 280 characters) for context
• Semantic embeddings – Vector representations of email content for search and classification (original text is not reconstructable from embeddings)

3. Google Calendar Data

To provide scheduling services, we access:

• Calendar events – Event titles, descriptions, times, locations, and attendees
• Calendar metadata – Calendar names, time zones, and settings
• Free/busy information – Availability for scheduling purposes

4. Usage Data

We automatically collect:

• Service logs – API requests, errors, and system performance
• Decision history – Your approvals, rejections, and feedback on AI-generated actions
• Interaction data – Features used, command inputs, and timing information
• Trust progression – Your autonomy level and approval patterns

1. Provide Core Services

• Classify and triage incoming emails by importance
• Generate draft responses matching your communication style
• Schedule meetings and manage calendar events
• Learn your preferences and patterns for better automation
• Execute approved actions on your behalf

2. Improve Our Service

• Train and improve AI models using aggregated, anonymized data
• Identify and fix bugs and performance issues
• Develop new features based on usage patterns

3. Ensure Safety and Security

• Prevent spam, fraud, and abuse
• Enforce our Terms of Service
• Comply with legal obligations
• Implement SafetyGate protections for sensitive actions

Encryption

• Data in transit: All data is encrypted using TLS 1.3
• Data at rest: Sensitive data is encrypted using AES-256-GCM
• OAuth tokens: Google refresh tokens are encrypted before storage
• Embeddings: Stored in encrypted vector database

Data Retention

Data Location

• Primary infrastructure: United States (Vercel Edge, Neon PostgreSQL)
• Database: Neon PostgreSQL (US East)
• Cache: Upstash Redis (US East, ephemeral)
• Real-time: Pusher (US region)

We Do NOT Share Your Data

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Limited Exceptions

We may disclose your information only in these specific circumstances:

1. With Your Consent – When you explicitly authorize sharing
2. Service Providers – Infrastructure providers (Vercel, Neon, Upstash) under strict data processing agreements
3. AI Processing – Anthropic Claude API for email classification and draft generation (see below)
4. Embeddings – Voyage AI for semantic embeddings (see below)
5. Legal Requirements – When required by law, subpoena, or court order
6. Safety – To protect our rights, property, or the safety of our users

AI Processing

Email content is sent to Anthropic (Claude API) for:

• Email classification and importance scoring
• Draft response generation
• Intent understanding and action extraction

Anthropic processes this data according to their API Terms of Service and does not train models on API usage data.

Embedding Generation

Email content is processed by Voyage AI to generate semantic embeddings for:

• Email search and retrieval
• Context matching
• Classification

Voyage AI does not retain the original text after generating embeddings.

Access and Export

You can:

• View your data – Access your decision history, preferences, and settings at any time
• Export your data – Request a complete export in JSON format

Contact: support@mypepper.io

Deletion

You can:

• Delete individual threads – Remove specific email threads from our system
• Delete your account – Permanently delete all your data within 30 days

To delete your account:

1. Go to Settings → Account → Delete Account
2. Confirm deletion
3. All data will be permanently deleted within 30 days

Autonomy Control

Pepper uses a "career ladder" trust model where you promote Pepper through tiers as it earns trust. You control Pepper's autonomy level:

You can change your autonomy level at any time in Settings.

Revoke Access

You can revoke Pepper's access to your Google account at any time:

1. Go to Google Account Permissions
2. Find "Pepper" in the list
3. Click "Remove Access"

Note: After revoking access, Pepper will no longer function, but your data will remain until you delete your account.