Privacy Policy

1. Data we collect and use

• Oshaani account – You sign in only with your oshaani.com account (OpenID Connect). We receive your Oshaani account ID and email address, keep them in your signed session cookie, and store a link between your Oshaani account and the Google account you connect. With your permission we also list your Oshaani agents, create API keys for the agent you choose, and show your oshaani.com credit balance and recent credit activity. We do not see or store your Oshaani password.
• Google account data – After signing in, you connect your Google account (OAuth). We receive and store access and refresh tokens so we can, on your behalf, read and write data in Gmail, Google Chat, Google Drive, Google Docs, Google Sheets, and Google Tasks. Google is not used to sign you in, and we do not see or store your Google password.
• Email address – We use your connected Google account email to associate your credentials and settings with your account.
• Content processed by workflows – To run workflows (e.g. Smart Inbox, Document intelligence, Chat auto-reply), we read relevant content (emails, Chat messages, Drive files) via Google APIs and may send summaries or excerpts to Oshaani’s AI agents to generate replies, summaries, or action items. This processing is done in accordance with the workflows you enable.
• Oshaani API key – If you provide your own Oshaani agent API key, it is stored in your Google Drive (folder “Smart Inbox”) and used only for your workflow runs.
• API keys – If you generate an API key for scripts or MCP, we store a hash of the key to authenticate requests; we cannot recover the original key.

2. Where your data is stored

• Your Google Drive – User credentials and optional Oshaani key are stored in a folder named “Smart Inbox” in your Google Drive. You can view or delete this folder at any time.
• Server – A minimal bootstrap (e.g. refresh token reference) may be stored on our servers so we can refresh your Google access after restarts. No email or message content is stored long-term on our servers.

3. Third-party services

• Google – We use Google OAuth and Google APIs. Your use of the service is subject to Google’s Privacy Policy and their API terms.
• Oshaani – Workflow content (e.g. summaries, message excerpts) may be sent to Oshaani.com for AI processing. Oshaani has its own privacy and data practices; we encourage you to review their policy.

4. How we use your data

We use your data only to:

• Provide and operate the Smart Inbox workflows you enable.
• Authenticate you (sessions and API keys) and store your preferences (workflow toggles, Oshaani key).
• Improve reliability (e.g. logging of errors); we do not sell your personal data.

5. Your choices and rights

• You can sign out and revoke access at any time. You can also remove the app’s access in your Google account permissions.
• You can disable automation or individual workflows from the dashboard.
• You can delete the “Smart Inbox” folder from your Google Drive to remove stored credentials and Oshaani key from our use.
• Depending on your jurisdiction, you may have rights to access, correct, or delete personal data; contact us (see below) to request this.

6. Security

We use industry-standard practices to protect credentials and data in transit and at rest. Sessions use secure cookies in production (HTTPS). API keys are stored as hashes. We do not log message or email content beyond what is necessary for error diagnosis.

7. Changes to this policy

We may update this privacy policy from time to time. The “Last updated” date at the top will be revised when we make material changes. Continued use of the service after changes constitutes acceptance of the updated policy.

8. Contact

For privacy-related questions or requests, contact us via Oshaani.com or the support channel provided where you access Smart Inbox.