Privacy Policy

Google connected accounts and Lucy

This policy also covers Lucy and the Growth Engine platform at growth-stack.recursive-solutions.com. Signing in with Google supplies account identity information such as your name, email address and profile picture. It does not by itself connect your mailbox or calendar. You choose each Google service separately and authorize its permissions on Google's consent screen.

Data accessed and how it is used

• Gmail: message content, subjects, sender and recipient addresses, threads, labels and mailbox metadata are used to display correspondence, recognize replies, classify email and prepare replies. Authorized features send messages and apply or remove labels, mark messages read and archive messages according to your instructions and mailbox rules.
• Google Calendar: event titles, times, descriptions, attendees and meeting links are used to show upcoming events, check availability and create or update meetings.
• Google Analytics: property and web-stream information and traffic, acquisition, page-performance and conversion reports support reporting and measurement setup. The setup feature can create a GA4 property and web data stream when requested.
• Google Search Console: authorized site properties, search queries, clicks, impressions and positions support search-performance reports and SEO work.
• Google Business Profile: where API access is available, authorized business accounts, locations, listing details, reviews and posts support the enabled business-profile features. Authorization does not guarantee Google API availability.

AI processing and service providers

Lucy uses AI to classify email, draft replies, summarize information and carry out the work you request. Relevant Google-derived content, including message text and correspondence metadata, may be sent to OpenRouter and the model providers that process the request. Email classification also uses TypeSafe's Jev service through OpenRouter. The model used depends on the feature and configured model selection. Our hosting, database and storage providers process stored records to operate these features.

We do not use Google user data to train or fine-tune generalized AI models. Our OpenRouter account excludes paid and free endpoints that train on request data, excludes endpoints that publish prompts, and does not allow the input/output data-sharing discount. TypeSafe states that it does not train or fine-tune models on customer input. These training restrictions do not mean every provider has zero retention: processing, security and legal retention may apply under the provider's terms.

Before connecting a mailbox, consider that its messages may contain other people's information. Only connect accounts you are authorized to use. You can review and control Lucy's mailbox behavior in Email rules and stop future connected-account access by disconnecting the account. If you do not want this processing, do not connect that service.

Google API Limited Use

Recursive Solutions' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used to provide the user-facing features described here. We do not sell it or use it for advertising targeting, credit decisions or generalized AI training. Transfers are limited to providing these features with your consent, security purposes, legal requirements or other purposes expressly permitted by that policy. Human access is limited to your affirmative permission to inspect specific data, security investigations, legal obligations or the limited aggregated internal operations permitted by Google's policy.

Storage, disconnection and deletion

Access and refresh tokens are stored encrypted on our servers. We also store records needed for your workspace, including mailbox identifiers, message metadata and snippets, classifications, drafts, correspondence and derived CRM or reporting records. Access is controlled by account and business permissions, and data is transmitted over HTTPS.

Disconnecting a service in Connections removes that stored connection and stops future access through it. You can also revoke authorization in your Google Account's third-party connections. Disconnection does not automatically erase previously stored messages, drafts, reports, logs or derived records. We retain these only as needed to provide the service and meet security or legal obligations; copies held by service providers follow their retention terms.

To request access, export or deletion of retained Google-derived data, email [email protected] and identify your account and business. We respond within 30 days. We will explain any records that must be retained and any applicable legal exception rather than treating disconnection as a promise of immediate deletion.