Privacy Policy

Last updated: December 7, 2024

1. Information We Collect and Why

• Email address: Used for authentication and to identify your account.
• OAuth Scopes for Gmail Add-on: We request the narrowest possible permissions to function within Gmail.
  • https://www.googleapis.com/auth/gmail.addons.current.message.readonly is used to read the content of the email you are currently viewing to provide analysis. We cannot access any other messages.
  • https://www.googleapis.com/auth/gmail.addons.current.action.compose is used solely to create a draft reply for the current message when you click an action button.
  We do not have permission to, and do not, send emails on your behalf or access any emails outside of the single message you have open in the add-on.
• Browser type & IP address: Stored in temporary server logs for security and debugging purposes.
• Cookies: Essential session cookies to keep you logged in and preference flags.

2. Data Handling and Retention

We do not permanently store your email content. Email content is processed transiently in memory and is never saved to our servers' disks.

Shopify App Compliance: Our app operates on a Zero-Storage architecture. We process shop data and customer information purely in-memory during processing and do not store, persist, or harvest any customer personal identifiable information (PII) on our servers.

Pursuant to the Shopify Partner Agreement (2026 Update), we are strictly prohibited from using merchant or customer data to develop, fine-tune, or train any artificial intelligence systems without explicit written consent. Our application strictly operates on a memory-only, transient processing basis. All order privacy and email content are processed purely in random-access memory (RAM) for real-time context summarization and tool calls. No persistent storage (Zero Disk Persistence) is used, and under no circumstances will any merchant or customer data be utilized for LLM fine-tuning or secondary AI model training.

Any metadata or analysis results derived from email processing (such as an intent summary) are automatically and permanently deleted from our systems within 7 days of creation. This is to provide you with a short window to review past activity if needed for support reasons, while minimizing data retention.

3. Sharing and Disclosure of Google User Data

To provide our core features, we share a limited subset of your Google user data with third-party AI service providers (such as Google Cloud AI or OpenAI). Our use and transfer of information received from Google APIs to any other app adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• What is shared: The text content (body and subject) of the currently active email is sent to our AI provider for analysis and draft generation.
• What is NOT shared: We do not share your name, email address, or OAuth tokens with our AI providers. The data is sent for processing and is not used to train their models or stored long-term on their systems.

We do not sell, transfer for marketing purposes, or otherwise disclose your Google user data to any other third parties, except as explicitly listed in the "Third-Party Processors" section below for the essential functioning of the service.

4. Third-Party Processors

We use the following third-party services to provide our application:

• Shopify: Used for app subscription billing and tax compliance. Shopify manages merchant subscription records, payouts, and billing approvals.
  Shopify�s privacy policy: https://www.shopify.com/legal/privacy
• AI Service Providers (e.g., Google Cloud AI, OpenAI): Used to analyze email content and generate reply drafts. These providers process email text transiently and are contractually obligated not to store it or use it for training their models.

5. Cookies

Essential cookies keep you signed in. You can block cookies in your browser, but the service will not be able to function.

6. GDPR & CCPA

We act as a data processor. You may request access, correction, erasure or portability of your personal data by emailing support@giihelpdesk.com. We do not sell personal information.

7. Security

All data in transit between your browser, Google, and our servers is encrypted using industry-standard TLS 1.3.

8. Contact

For questions about this Privacy Policy, please contact us at support@giihelpdesk.com.