Privacy Policy for Zarie

A. Information from Slack

When you install or use Zarie in your Slack workspace, we receive the following information:

• • User Information: Your Slack User ID, Full Name, Display Name, and Timezone.
• • Workspace Information: Your Slack Team ID (Workspace ID).
• • Message Content: The text of Direct Messages (DMs) you send specifically to the Zarie bot. We do not access messages in other channels unless the bot is explicitly tagged or added to that channel.

B. Usage Data

We collect metadata about your interactions with the bot, such as timestamps of messages, to maintain conversational context.

Google Calendar Integration (Read/Write Access)

What we access:

• • We request full access to your Google Calendar (calendar scope)
• • We can read your calendar events (title, time, attendees, description)
• • We can create, modify, and delete calendar events on your behalf

How we use this data:

• • Check for scheduling conflicts before setting reminders
• • Retrieve your schedule when you ask about upcoming events
• • Create calendar events based on your instructions (e.g., "Add dentist appointment tomorrow at 2 PM")
• • Provide smart scheduling suggestions by analyzing your availability

Data retention:

• • Calendar event data is processed in real-time for scheduling features
• • We do not permanently store your calendar events in our databases
• • We only retain your Google authentication credentials to access your Calendar when needed

Data Processing and Security

AI Processing:

• • Calendar data that you request (e.g., "What's on my calendar?") is sent to our AI language model providers for processing
• • This data is sent via secure API connections and is processed only to generate responses to your requests
• • Our AI providers process this data solely for generating responses and do not store or use it for model training

Authentication:

• • Your Google credentials (OAuth tokens) are encrypted and stored securely in our database
• • We use industry-standard security measures to protect your authentication data
• • Credentials are only used to access your Google Calendar data when you explicitly request features that require them

Data Access:

• • We only access your Calendar data when you actively use features that require it
• • We do not continuously sync or monitor your Google data in the background
• • Each access is triggered by your direct request or by automated workflows you have explicitly configured

Your Control and Rights

Revoking Access:

• • You can revoke Zarie's access to your Google account at any time by visiting your Google Account Permissions
• • After revocation, we will no longer be able to access your Calendar
• • You can also disconnect your Google account within Zarie by contacting support

Data Deletion:

• • If you revoke access or delete your Zarie account, we will delete your stored Google credentials within 30 days
• • Any temporarily cached Calendar data will be removed immediately

Google API Services User Data Policy Compliance

Zarie's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Limited Use Disclosure:

• • We use Google user data only to provide and improve Zarie's features
• • We do not use Google data for serving advertisements
• • We do not allow humans to read your Calendar data except for security purposes, to comply with applicable law, or with your explicit consent
• • We do not transfer Google user data to third parties except as necessary to provide Zarie's services (AI processing), comply with applicable law, or as part of a merger or acquisition with prior notice to you

A. AI Processing

We use Google AI Studio (specifically the Gemini 2.5 Flash model via Google AI Studio Paid Tier) exclusively for all AI processing, including both Google Calendar data and general conversational interactions.

• • No Training: Google contractually agrees that your data is not used to train their machine learning models.
• • Data Retention: Data sent to these models is ephemeral and is not stored by the model provider.
• • Paid Tier: We use Google AI Studio's Paid Tier with Zero Data Retention guarantees.

B. Hosting and Storage

• • Provider: We use trusted cloud infrastructure providers to host our application and database.
• • Data Stored: User profiles (IDs, names) and conversation logs are stored in secure databases.
• • Security: Our infrastructure providers utilize industry-standard security measures to protect the services and data.