Privacy Policy

Account information. Your name, email address and, if you sign up with a password, a salted hash of that password.

Google account data. When you sign in with Google or connect Google Workspace, and only with your permission, we access:

• Gmail: message metadata and content, labels and drafts, so you can read, search, organise, draft and send email.
• Google Calendar: events and availability, so you can view, create and manage meetings.
• Google Drive, Docs, Sheets, Slides and Forms: file names, links and content, so you can browse, open and create files.
• Google Tasks: your tasks, so you can view and update them.

Other connected services. If you connect tools such as Slack, Notion, Jira, Trello, GitHub, LinkedIn or Discord, we access the data needed for the features you use with them.

Content you create. Chat messages, prompts, uploaded documents, drafts, contacts and agent configurations.

Usage data. Login times, activity logs, feature usage and technical data such as IP address and browser type, used for security and to improve the service.

• To provide the features you request, such as summarising your inbox, drafting replies, scheduling meetings or creating documents.
• To run AI agents and automations you set up, including inbox monitoring and auto-replies you have enabled.
• To keep the service secure, prevent abuse and fix problems.
• To communicate with you about your account and the service.

MightyClaw's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve user-facing features that are visible in MightyClaw.
• We do not use Google user data to serve advertisements.
• We do not sell Google user data, or transfer it to third parties except as needed to provide the features you use, to comply with law, or as part of a merger or acquisition with notice to you.
• We do not use Google user data to develop, improve or train generalised AI or machine-learning models.
• Humans at M37Labs do not read your Google user data unless you give us explicit permission for specific messages, it is necessary for security purposes such as investigating abuse, or it is required by law.

To answer your requests, relevant parts of your content, which may include email, calendar or document data, are sent to AI model providers (such as Google Gemini, OpenAI and Groq) for processing. These providers process the data on our behalf to generate a response. We do not permit them to use your data to train their models where their terms give us that choice.

We do not sell your personal information. We share it only with:

• Service providers that host and run MightyClaw for us, such as cloud hosting, database, caching and AI model providers, under obligations to protect it.
• Services you connect, when you ask MightyClaw to act in them, for example sending an email or posting to Slack.
• Authorities, when required by law or to protect the rights and safety of users and the public.

Data is stored on secured cloud infrastructure. OAuth tokens for Google and other connected services are encrypted at rest, and all traffic is encrypted in transit using TLS. Short-lived caches of Google data expire automatically within minutes. No system is perfectly secure, but we work to protect your data and will notify you of a breach where the law requires it.

We keep your data for as long as your account is active. You can disconnect Google or any other service at any time from Settings, or revoke MightyClaw's access from your Google Account permissions.

To delete your account and the data associated with it, email info@m37labs.com. We will delete it within 30 days, except where we must keep it to meet legal obligations.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to or restrict how we process it. To exercise any of these rights, contact info@m37labs.com.

MightyClaw is not intended for anyone under 16, and we do not knowingly collect their data.

We may update this policy from time to time. We will change the date at the top and, for significant changes, notify you by email or in the app.

Questions about this policy or your data: info@m37labs.com.