Privacy Policy

D9ai ("we", "our", or "us") operates an AI-powered email and calendar client at d9ai.online ("Service"). This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

By using D9ai, you agree to the practices described in this policy.

1. Data We Access

When you connect your Google account, we request access to:

• Gmail — to read, send, and manage your emails on your behalf.
• Google Calendar — to read, create, and manage your calendar events on your behalf.
• Basic profile information — your name and email address, used to identify your account.

We access this data only when you explicitly ask D9ai to perform an action (e.g., "fetch my latest emails" or "create a calendar event").

2. How We Use Your Data

We use the data we access solely to:

• Fulfill the actions you request through the D9ai AI assistant.
• Display your emails and calendar events within the Service.
• Maintain your session and authenticate you securely.

We do not:

• Sell, rent, or share your Gmail or Google Calendar data with any third party.
• Use your data to serve advertisements.
• Train AI models on the content of your emails or calendar events.
• Store the full content of your emails or calendar events on our servers beyond what is necessary to complete your requested action.

3. Google API Services

D9ai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we only use Google user data to provide and improve the features you explicitly request. We do not use Google user data for any other purpose.

4. Data Storage and Security

We store OAuth tokens securely in an encrypted database to maintain your connection to Google services. Chat history (your messages and AI responses) is stored to allow you to revisit past conversations.

We implement industry-standard security measures including HTTPS encryption in transit and secure storage at rest. We do not store the raw content of your emails or calendar events permanently.

5. Data Retention

We retain your account data and chat history for as long as your account is active. If you delete your account, all associated data is permanently removed within 30 days.

You can revoke D9ai's access to your Google account at any time via your Google Account permissions.

6. Third-Party Services

We use the following third-party services to operate D9ai:

• Google OAuth 2.0 — for authentication and Gmail/Calendar access.
• OpenAI — to power the AI assistant. Your messages are sent to OpenAI to generate responses. OpenAI's Privacy Policy applies to this processing.

We do not share the content of your emails or calendar events with OpenAI unless you explicitly ask D9ai to act on them (e.g., "summarize this email"). In that case, only the relevant content needed to complete your request is sent.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request deletion of your account and all associated data.
• Revoke Google access permissions at any time.
• Request a copy of your data by contacting us at the email below.

To exercise any of these rights, contact us at legal@d9ai.online.

8. Children's Privacy

D9ai is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending you an email. Continued use of D9ai after changes are posted constitutes your acceptance of the updated policy.