Privacy Policy

Last updated: 2026-09-12

The short version. We read your Gmail and calendar to work out what you owe people and when you are free. We store the results against your account. We never send email as you, never sell your data, and never use it to train models. One button deletes all of it.

1. Who we are

Owed (“we”, “us”) provides an email triage and commitment-tracking service. TODO: add your legal entity name, registered address and contact email before publishing. Questions: privacy@example.com (TODO: replace).

2. What we access

When you connect your Google account, you grant these scopes:

gmail.modify — read message headers and bodies, and archive threads you choose to archive. This scope permits sending, but the application contains no send capability; replies open a Gmail compose window for you to send yourself.
calendar.readonly — read event times on your primary calendar to find the gaps between meetings. We read start and end times and titles. We never create, edit or delete events.
email, profile, openid — your email address and name, to identify your account.

3. What we store

Message metadata and content — sender, recipients, subject, a short preview, and timestamps for recent messages, including sent mail. Body text is read during processing to find commitments and deadlines; the sentence a commitment came from is stored as evidence so you can verify it.
Derived results — priority, category, estimated reply effort, extracted commitments and deadlines.
Calendar busy blocks — start time, end time and title for the current day.
Your Google refresh token — encrypted with AES-256-GCM before it is written to the database, so the database only ever holds ciphertext.

4. What we never do

We never send, forward or delete email on your behalf.
We never sell, rent or trade your data.
We never use your email content to train, retrain or fine-tune any machine learning model, ours or anyone else’s.
We never share your data for advertising.
No human at Owed reads your mail, except where you explicitly ask us to investigate a problem and give permission for that specific case.

5. Limited Use disclosure

Owed’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use Google user data only to provide and improve the user-facing features described in this policy; we do not transfer it to third parties except as necessary to provide those features, for security purposes, or to comply with applicable law; we do not use it for advertising; and we do not allow humans to read it unless we have your affirmative agreement for specific messages, it is necessary for security or to comply with applicable law, or the data is aggregated and anonymised.

6. Sub-processors

We use a small number of providers to run the service:

Supabase — database and authentication. Stores the data listed in section 3.
Vercel — application hosting. Processes requests in transit.
Anthropic — the model that classifies messages and extracts commitments. Message subjects, previews and body excerpts are sent for processing. Anthropic does not train on data submitted through its API.
Google — the source of your mail and calendar data.

7. Security

Refresh tokens are encrypted with AES-256-GCM before storage.
Row-level security is enforced in the database, so one account’s data cannot be returned to another even in the event of an application bug.
All traffic is served over TLS with HSTS.
A strict Content Security Policy is applied to every response.

No system is perfectly secure. If you discover a vulnerability, please report it to security@example.com (TODO: replace) and we will respond promptly.

8. Retention

We keep your data while your account is open. Deleting your account removes every row we hold about you immediately, with no retention window. Message data older than 180 days is pruned automatically as part of normal operation.

9. Your rights

Access and export — download everything we hold from Settings.
Deletion — Settings → Delete account removes all data and revokes our access to your Google account.
Revoke access at Google — you can also remove our access at any time from your Google account permissions page.

If you are in the UK, EU or another region with data protection rights, you may also request correction or restriction of processing, and may lodge a complaint with your local supervisory authority.

10. Cookies

We set one essential cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

11. Children

The service is not directed at anyone under 16 and we do not knowingly collect their data.

12. Changes

If we change this policy materially we will notify you by email and in the app before the change takes effect.