Google API Services User Data Policy
Last updated: March 29, 2026
What data we access
When you connect your Google account, Opticlaw accesses the following data with your explicit permission:
- Gmail — Read email messages, search your inbox, and create draft emails on your behalf. We never send emails directly.
- Google Calendar — View your events, check availability, and create new events when you ask.
How we use your data
Your Google data is used solely to provide the features you request through Opticlaw's conversational interface. For example:
- Summarizing your unread emails when you ask “check my inbox”
- Drafting a reply when you say “draft a response to that email”
- Showing your schedule when you ask “what's on my calendar today?”
To process these requests, your email and calendar data is sent to Anthropic's Claude AI via their API. Anthropic processes this data only to generate a response to your specific request. Anthropic does not store your data or use it to train AI models.
How we store your data
- Your Google refresh token is encrypted with AES-256-GCM before storage.
- Access tokens are held in memory only for the duration of a request (up to 55 minutes cached) and are never written to the database.
- Email content and calendar data are not stored — they are fetched on demand and discarded after the response is generated.
How to revoke access
You can disconnect your Google account at any time:
Revoking access immediately deletes your stored refresh token and stops all Google API access.
Limited Use Disclosure
Opticlaw's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only use Google user data to provide and improve user-facing features that are visible to you.
- We do not use Google user data for advertising, market research, or to train AI models.
- We do not transfer Google user data to third parties except as necessary to provide the service (Anthropic API for AI processing) or as required by law.
- We do not allow humans to read your Google user data unless you give explicit consent, it is necessary for security purposes, or it is required by law.