Privacy Policy

Account information. When your organization creates your account, we store your name, work email address, role, and organization affiliation.

Connected account data. When you connect a Google account, or a third-party system such as CRM, Jira, HubSpot, Dynamics 365, NetSuite, or ServiceNow, we store an encrypted access token (and refresh token, where provided) that lets MyGenie act on that account on your behalf, along with basic profile information (name, email address, and — for Google — a profile photo) used to display which account is connected.

Conversation content. We store the messages you send to MyGenie and the results of any actions it takes, so you can see your chat history and so we can improve reliability and troubleshoot issues.

If you connect a Google account, MyGenie requests the following permissions. We only use each permission to carry out the specific request you make in a chat message — MyGenie never reads, sends, or modifies anything in the background without your request.

• Gmail — to search and read your messages when you ask a question about your inbox, and to draft or send email only when you explicitly instruct MyGenie to do so.
• Calendar — to read your events when you ask about your schedule, and to create or update events when you ask MyGenie to schedule something.
• Drive — to search and read file names and content so MyGenie can answer questions about your documents. MyGenie does not modify, delete, or share your Drive files.
• Contacts— to look up a contact's email address when you refer to someone by name.

We do not use Google user data for advertising, and we do not transfer Google user data to any third party except as necessary to provide the feature you requested (for example, sending an email you asked MyGenie to send).

We use account and conversation data to operate, secure, and improve MyGenie — including authenticating you, routing your requests to the right connected system, maintaining your chat history, and diagnosing errors. We do not sell your data or use it to train third-party models without your organization's consent.

Account data and conversation history are stored in an encrypted, access-controlled database. OAuth access and refresh tokens for connected accounts are encrypted at rest and are only decrypted server-side, at the moment they are needed to fulfill a request you made.

We retain connected-account tokens until you disconnect the account or your administrator removes your access. You can disconnect any personal Google, Jira, or HubSpot account at any time from the Integrations panel — this immediately revokes MyGenie's stored access to that account. Chat history is retained for as long as your account remains active, unless your organization requests earlier deletion.

We do not sell your personal information. We share data only: (a) with the third-party systems you explicitly connect, to carry out the action you requested; (b) with service providers who help us operate MyGenie (such as hosting and database providers), under confidentiality obligations; or (c) where required by law.

You can disconnect any personal connected account at any time from the Integrations panel in MyGenie. Company-wide integrations (such as your organization's CRM) are managed by your administrator. To request deletion of your account or data, contact your administrator or reach out to us directly using the contact details below.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly.

If you have questions about this Privacy Policy or how MyGenie handles your data, contact us at privacy@cloudsmartz.net.