Privacy Policy

1. Information We Collect

We collect information necessary to provide our business automation services, including websites, content creation, connected channels and customer communication. This includes your email, name, and profile information retrieved via Google OAuth, as well as contact data (names and emails) you upload to our platform via CSV or manual entry.

2. Use of Google User Data

We access your Google data strictly for the following purposes:

• Gmail (Read/Send): To display email threads within our dashboard, detect replies to stop automated follow-ups, and send outreach emails on your behalf. We do not read emails other than those related to your connected campaigns.
• Google Sheets (files you choose): Accessed only for spreadsheets you choose to import. We read them to create leads from your contact list. We cannot see any other files in your Google Drive.
• Google Calendar (meeting booking): When you connect your calendar to offer a booking page, we read your calendar list and free/busy times so we only offer open slots. We do not read the titles, descriptions or attendees of your existing events. When someone books, we create the meeting on your own calendar with a Google Meet link and invite the guest, and we update or delete only the events Automyc created when a booking is rescheduled or cancelled.
• Google Workspace administration (mailbox management): If you buy Google Workspace through Automyc, your Workspace administrator can connect the domain so they can manage its mailboxes from Automyc. We use this access only to list, create, update, suspend and delete users, reset passwords, and manage aliases and admin rights on that domain, and only when the administrator asks. Temporary passwords are shown once and are not stored.
• YouTube: When you connect a YouTube channel, we publish the videos you schedule, manage their details and comments, and show your channel's statistics. Automyc uses YouTube API Services; by connecting YouTube you agree to the YouTube Terms of Service, and Google's use of your data is covered by the Google Privacy Policy.
• Profile Info: To identify your account and display your name/avatar in the user interface.

We use Google user data only to provide these features to you. We do not sell it, share it with third parties other than the service providers needed to run these features, or use it for advertising. Automyc staff do not read your Google data unless you ask us to for support, it is needed for security, or the law requires it.

We do not use your Google Workspace data to train generalized AI models. Any AI processing (e.g., reply generation) is performed on a per-request basis with transient data retention.

When you disconnect Gmail, Google Calendar, YouTube or a Workspace domain in Automyc, we delete the access tokens we hold for it. You can also remove Automyc's access at any time from your Google Account permissions.

3. Billing and Subscription Data

If you purchase a paid plan, billing data is processed by your chosen payment channel (for example Apple App Store, Google Play, Stripe, or PayPal). We receive limited records needed for entitlement, fraud prevention, support, accounting, and compliance, such as purchase status, product identifier, transaction reference, renewal state, and billing country.

4. Data Security

All sensitive data, including OAuth tokens and personal identifiers, are encrypted at rest and in transit using industry-standard protocols (AES-256 and TLS 1.3). We do not store your Google account password.

5. Third-Party Sharing

We do not sell your data or your contacts' data to any third party. Data is only shared with essential sub-processors (like database providers and AI processing units) strictly necessary to fulfill our service obligations.

6. Data Retention

We retain account and operational data as long as your account is active or as needed to provide services, resolve disputes, enforce agreements, and comply with legal obligations. You can request account deletion. Some records may be retained for legal, tax, fraud-prevention, or audit requirements.

7. Your Rights

Under GDPR and CCPA, you have the right to access, delete, or port your data. You can disconnect your Google accounts and delete your entire automyc profile at any time directly through the account settings menu.

8. Digital Product Buyer Accounts

When you sign in to a seller's shop, we store your email address, optional name, sign-in records, purchase details, payment references, refund or dispute status, and download counts for that website. Buyer accounts are separate for each website. We use this information to authenticate you, fulfil purchases, send sign-in and purchase emails, provide download access, and prevent fraud.

The seller and authorised members of their workspace can view buyer details and order records for their website. Stripe processes card details on its hosted payment page; Automyc does not store your card number or security code. We send Stripe your purchase information and receipt email address. Our email and private-storage providers process information needed to send messages and deliver files. These providers may process data outside your country.

Sign-in codes expire after ten minutes and are stored as hashes. Buyer sessions use hashed server-side tokens and a token stored in your browser; signing out revokes that session. Download links expire after five minutes. We retain purchase records as needed to provide ongoing access, handle disputes, and meet applicable recordkeeping obligations. Contact the seller for purchase questions and privacy@automyc.com for access, correction, or deletion requests. Required transaction records may remain after an account deletion request.

9. AI Apps Connected to Automyc

You can connect AI apps such as Claude, ChatGPT and Codex to your Automyc workspace. When you connect one, you choose the workspace and the permissions it gets (for example reading your inbox, replying to messages or publishing posts). Settings → AI apps shows every connected app, what it may do and its recent activity, and lets you disconnect it; disconnecting stops its access immediately.

The app receives the information its tools return during your conversation, such as the messages in a conversation you asked it to read, your brand kit, your posts or a dataset's records. That information becomes part of your conversation with that AI provider and is handled under the provider's own terms and privacy policy, which Automyc does not control.

Changes an app makes (drafts, replies, designs, records) are stored in your workspace like changes you make yourself. For each request we keep a record of which app and tool made it, when, and whether it succeeded, but not the request content. For actions that change something we also keep the result for 30 days, so a repeated request is not carried out twice. The request records are deleted after 13 months.

Sending messages and emails, publishing or scheduling posts and websites, starting campaigns, sending SMS, cancelling bookings and changing DNS are shown to you first and only happen after you approve them. Automyc AI and media features used from an AI app (for example voice-overs) use your workspace credits, are quoted before they run, and are limited by a daily cap per connected app that you set. Voice-overs are made by our speech providers (ElevenLabs, with Speechmatics as a fallback) and transcripts by AssemblyAI, as for the same features in the dashboard.

If you install Automyc Studio, videos and designs are rendered on your own computer, and files stay there until you choose to upload a result to your workspace.

10. Contact

Privacy requests: privacy@automyc.com. Legal requests: legal@automyc.com. You may also review our Terms of Service and Subscription Policy.