Privacy Policy

What Google User Data We Access

We only request the OAuth scopes required for features you explicitly enable. The Google user data accessed by our platform is:

Gmail (when you connect Gmail)

• https://www.googleapis.com/auth/gmail.readonly — read email messages, threads, labels, and metadata in your mailbox so we can display your inbox, sync conversations to CRM contacts, and surface replies inside the platform.
• https://www.googleapis.com/auth/gmail.send — send emails on your behalf from your connected Gmail address when you compose, reply, or run an outbound campaign step inside the platform.
• https://www.googleapis.com/auth/gmail.modify — modify message state (mark as read, archive, apply labels, move) and manage push-notification watches so the platform stays in sync with your mailbox.
• Your Google account email address and basic profile (name, picture).

Google Analytics (when you connect a GA4 account)

• https://www.googleapis.com/auth/analytics.readonly — read your Google Analytics data, including reports, properties, views, and configuration accessed via the Google Analytics Data API and Admin API.
• https://www.googleapis.com/auth/analytics.edit — manage your Google Analytics property configuration (such as creating custom dimensions or data streams) only when you initiate those actions from inside the platform.
• https://www.googleapis.com/auth/analytics.manage.users.readonly — read the list of users who have access to your GA property so we can display permissions and route data correctly.

Google Calendar (when you connect a calendar)

• https://www.googleapis.com/auth/calendar.readonly — read-only access to your calendar list and events, used solely to display your calendars alongside your CRM pipeline inside the platform's Calendar module. We never create, edit, or delete your calendar events.

How We Use Google User Data

Google user data is used exclusively to provide the user-facing features you have authorized:

• Gmail inbox & threads: display your messages inside the CRM, attach them to the correct contact or deal, and show reply status on outbound campaigns.
• Outbound email: send messages, drafts, replies, forwards, and campaign steps from your address via the Gmail API.
• Sync state: mark messages read, apply labels, archive, and renew Gmail push-notification watches so the inbox stays in sync.
• Analytics dashboards: render charts, reports, and AI-generated summaries of your Google Analytics traffic, conversions, and audience data inside the platform.

We do not use Google user data for any purpose other than to provide and improve these user-facing features.

Limited Use — What We Will Never Do

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We do not sell Google user data.
• We do not use Google user data to serve advertisements, including personalized, remarketing, or interest-based advertising.
• We do not transfer Google user data to third parties except as needed to provide or improve user-facing features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.
• We do not use Google user data, including the contents of Gmail messages or Google Analytics reports, to train generalized or third-party AI or machine learning models.
• To power user-facing AI features inside the platform (such as Google Analytics summaries, insights, drafts, and assistant responses), portions of your Google Analytics data may be sent to third-party AI providers — specifically OpenAI and Anthropic — for inference. These providers process the data on a per-request basis to return a response to you and, under the API terms we use, do not retain that data for training their models. We only send the minimum data needed to fulfill the feature you triggered.
• Humans do not read your Gmail messages or Google Analytics data except (a) with your explicit consent, (b) for security investigations or to comply with law, or (c) when the data has been aggregated and anonymized for internal operations.

How Google Data Is Stored & Protected

OAuth refresh and access tokens for your Google account are stored encrypted in our backend database (Xano, hosted on Google Cloud / AWS infrastructure) and are scoped to your user record and company workspace. Gmail message content that we display is fetched on demand from the Gmail API; we cache metadata (message IDs, thread IDs, subject, sender, timestamp, and labels) and store the bodies of messages you explicitly send through the platform (so we can show them in your sent log and attribute them to CRM activity). Google Analytics responses are cached transiently to render dashboards and are not exported off-platform. All data is transmitted over TLS and access is restricted via per-company scoping and authenticated API requests.

Sharing of Google User Data

We do not sell Google user data, and we do not share it with third parties for their own purposes. We share Google user data only with the subprocessors that make our platform run, and only to the extent each subprocessor needs it to deliver its service:

• Xano — backend database and API platform where your account, tokens, and synced metadata are stored.
• Vercel — hosting for the web application that displays your data to you.
• Amazon Web Services (AWS) — Lambda and supporting infrastructure that proxies certain Google API operations.
• Anthropic (Claude) — AI model provider that powers in-product summaries, insights, and drafts. Portions of your Google Analytics data may be sent to Anthropic for inference when you trigger an AI feature. Under Anthropic's API terms, customer data submitted via the API is not used to train Anthropic models.
• OpenAI — AI model provider that powers in-product summaries, insights, and drafts. Portions of your Google Analytics data may be sent to OpenAI for inference when you trigger an AI feature. Under OpenAI's API terms, data submitted via the API is not used to train OpenAI models by default.

These subprocessors are contractually bound to handle Google user data in a manner consistent with this Privacy Policy and the Google API Services User Data Policy, including the Limited Use requirements. Google user data is transferred to OpenAI and Anthropic only as needed to provide or improve user-facing features.

Retention & Deletion of Google Data

We retain Google user data only as long as needed to provide the features you have enabled. You can remove your Google data at any time using any of the following methods:

• Disconnect Gmail or Google Analytics from inside the platform's Integrations / Settings page. This revokes our stored tokens and deletes the related cached data.
• Revoke our access directly from your Google account at myaccount.google.com/permissions. Once revoked, our tokens stop working and the associated data is purged on our next sync.
• Email us at support@parallelstrategies.ai with a deletion request. We will delete all Google user data tied to your account within 30 days of confirming the request.