Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: Your name, email address, and profile picture when you sign in with Google.
• Google Workspace data: With your explicit permission, we access Gmail messages and Google Calendar events to perform tasks you request.
• Usage data: We collect anonymized analytics about how you use Opticlaw, including features used, task counts, and session duration.
• API keys: If you provide your own API keys, they are stored encrypted and used solely to make API calls on your behalf.

2. How We Use Your Data

• To provide and maintain the Opticlaw service, including executing tasks you request
• To authenticate you and manage your account
• To process payments and manage subscriptions
• To improve the Service based on usage patterns
• To communicate important service updates

We never use your data to train AI models. Your conversations and data are never shared with other users.

When you use email or calendar features, your email and calendar data is processed by Anthropic's Claude AI to execute your requests (e.g., summarizing emails, drafting replies, checking availability). This data is transmitted securely via Anthropic's API. Anthropic does not use your data to train models. See our Google API disclosure for details.

3. Third-Party Services

Opticlaw integrates with the following third-party services:

• Supabase: Database and authentication infrastructure
• Stripe: Payment processing (we do not store your full credit card details)
• Anthropic (Claude): AI model provider for generating responses and executing tasks
• PostHog: Product analytics (anonymized usage data only)
• Railway: Application hosting infrastructure

Each of these services has its own privacy policy governing how they handle data.

4. Data Security

We take data security seriously. All sensitive data, including API keys and OAuth tokens, is encrypted using AES-256-GCM encryption. Data is transmitted over HTTPS/TLS. Each user’s data is logically isolated using row-level security policies. We regularly review and update our security practices.

5. Data Retention

We retain your account data for as long as your account is active. Chat history and task logs are retained for 90 days, after which they are automatically deleted. If you delete your account, all associated data is removed within 30 days. Anonymized analytics data may be retained indefinitely.

6. Your Rights

You have the right to:

• Access: Request a copy of all personal data we hold about you
• Delete: Request deletion of your account and all associated data
• Export: Export your conversation history and account data
• Revoke access: Revoke Google Workspace permissions at any time through your Google Account settings
• Opt out: Opt out of analytics tracking from your account settings

7. Cookies

We use essential cookies for authentication and session management. We use PostHog for analytics, which may set cookies to track anonymized usage. We do not use advertising cookies.

8. Children’s Privacy

Opticlaw is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use of Opticlaw after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or your data, please contact us at privacy@opticlaw.app.