Privacy Policy

Introduction

Welcome to Barterloom. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our AI-powered email and calendar assistant service.

What Data We Collect

To provide our AI assistant features, we collect and process the following data:

• Google Account Information: Your email address and display name when you sign in with Google
• Gmail Messages: Email content, metadata, and attachments to enable email triage, drafting, and inbox management
• Google Calendar Events: Your calendar events and schedules to provide calendar management and scheduling assistance
• Google Tasks: Your task lists and items to help manage your to-dos and productivity

How We Use Your Data

We use your data exclusively to power the Barterloom AI assistant features:

• Email Triage: Automatically categorizing and prioritizing your emails
• Drafting: Writing replies and messages for you to review before sending
• Calendar Management: Helping you schedule, reschedule, and manage calendar events
• Task Management: Organizing and managing your tasks and to-do lists
• Voice Assistant: Processing voice commands to interact with your email and calendar

Data Storage & Security

Your data is stored securely using industry-leading cloud infrastructure. We implement industry-standard encryption and security measures to protect your information both in transit and at rest. Access to your data is strictly limited to what is necessary to provide our services.

Third-Party Services & Sub-processors

We use the following third-party services (sub-processors) to operate Barterloom. Each processes your data only as necessary to provide the service.

These receive the content of your messages, documents and conversations. We name each one individually, because if you hand us your inbox you are entitled to know who reads it:

• Google (Gmail, Calendar, Tasks): the source of your mail, calendar and tasks, accessed with your permission via OAuth. Privacy policy
• Anthropic: the AI that reads and understands your mail. Receives your email content, attachments, documents, calendar events, contacts and your conversations with the assistant, in order to triage, summarise and draft. Privacy policy
• Voyage AI: converts that same content into a mathematical form so the assistant can search it by meaning. Privacy policy
• Hindsight: the assistant’s long-term memory. Unlike the others, Hindsight keeps what it is given.Facts drawn from your correspondence — about your projects, your contacts and how you work — are stored on Hindsight’s servers and retained there so the assistant remembers between sessions, rather than being used for a single request and discarded. Deleting your account deletes your memory banks. Privacy policy
• Deepgram: receives your voice audio, to turn speech into text when you use the voice assistant. Privacy policy
• ElevenLabs: receives the text the assistant speaks aloud, which can include details from your mail, to turn it into speech. Privacy policy
• Firebase (Google): holds your sign-in credentials. It does not receive your mail. Privacy policy

We also use service providers that support the product without being sent your mail to read:

• Cloud hosting, database and caching providers in the United States, which store and serve the data described above
• A payment processor in the United States, which handles subscription billing and card details
• A telephony provider in the United States, which sends the verification code when you add a phone number

Data Sharing

We do not sell your personal data. Your data is only shared with the third-party service providers listed above, solely for the purpose of operating our service. We do not share, rent, or trade your personal information with any other parties for marketing or advertising purposes.

Data Retention

We retain your data according to the following policies:

• Email data: Retained while your account is active and synced from Gmail
• Chat history: AI assistant conversation history is retained while your account is active
• Calendar and task data: Retained while your account is active and synced from Google
• Account deletion: You can delete your account at any time from the Settings page. Your account is deactivated immediately — it stops syncing, sending and processing straight away — and everything is permanently erased 30 days later. During those 30 days you can sign in and cancel the deletion, and you can still download your data. After the erasure we keep three things: a record that the deletion happened and when, your record of accepting our terms, and our own billing and cost records with your name and email address removed from them

Your Rights

You have the following rights regarding your personal data:

• Right to Access and Export: Download everything we hold about you as a JSON file, from the Settings page, at any time. It contains your mail, contacts, projects, documents, conversations and settings. It lists your attachments and documents by name but does not include the files themselves — contact us if you would like copies. Sign-in credentials are never included
• Right to Deletion: Delete your account and all associated data permanently via Settings
• Right to Correction: Update your personal information through your account settings
• Revoke Access: Disconnect your Google account and revoke our access to your data at any time through your Google account settings

To exercise any of these rights, visit the Settings page in your Barterloom account or contact us at antoine@barter-loom.com.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected users via email within 72 hours of becoming aware of the breach, in compliance with GDPR requirements.

International Data Transfer

Your data may be processed in the United States where our hosting providers (Vercel, Supabase) operate. By using Barterloom, you consent to this transfer. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

Google API Services User Data Policy

Barterloom of California's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data obtained from your Google account is used only to provide and improve the features described in this policy. We do not:

• use it to serve advertising of any kind
• sell it, or transfer it to data brokers or information resellers
• use it to determine creditworthiness or for lending purposes
• use it to train or improve generalised AI or machine learning models
• allow humans to read it, except with your consent, where necessary for security purposes such as investigating abuse, or to comply with applicable law

We transfer it only to the service providers named above, and only as far as is necessary to provide the features you are using.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at: antoine@barter-loom.com