Understand what you share.

Google sign-in gives us identity details such as email address, name and profile image. If you connect Google services, the pilot accesses data needed for features you enable: email messages, attachments, labels and contacts derived from conversations; optional Calendar events and Tasks. We also handle settings, personal context you save, scheduled-send instructions and operational records. The Google Chat launcher opens Google Chat directly and does not request Chat API access.

We use this information to identify authorized pilot users, sync and display a workspace, carry out actions you request, provide optional AI assistance and operate the service. Mailbox actions such as sending, archiving or changing labels can change your Google account when you choose them.

The pilot runs on Render and connects to Google APIs. If you enable AI processing, relevant mail, instructions and saved context can be sent to OpenAI for processing. AI starts off. Background analysis and learning from received and sent mail have separate choices. Learning can propose facts or preferences with source excerpts; you review them before use. Confirmed context can support attention, planning and replies in your own account. You select the details for a contextual reply. New transmissions stop when you withdraw permission, although a request already sent may finish. Browser push services handle subscription details if you enable notifications.

See Google, OpenAI and Render for provider information.

Our use and sharing of Google API data follow the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising.

Synced data and configuration are stored in the server database. Google refresh tokens are encrypted. The browser also keeps preferences and some draft or pending-action data. Use care on shared devices. You can disconnect a mailbox in Settings → Accounts, change AI permissions in Settings → AI & Privacy, and correct or forget saved context. Disconnecting a mailbox, signing out and deleting your account have different effects.

In the current pilot app, go to Settings → AI & Privacy and use the account deletion control. After the required confirmation, this removes your identity, connected credentials, synced mail, drafts, scheduled sends, saved context, preferences, push subscriptions and related active records. It does not delete original Google email, Calendar events or Tasks, revoke Google’s app grant, remove downloads or recall an action already underway. Other online devices clear local app data when they detect deletion; offline devices may need manual cleanup.

If you cannot use the control, email support.zipsail@gmail.com from your pilot account. We may need to verify identity.

Synced data remains while the account is active; the pilot does not yet apply a fixed age limit to every message or operational record. Encrypted operator backups target 30 days, subject to successful backup and replacement. Hosting-provider snapshots have separate retention, so 30 days is not a promise of complete erasure from every recovery copy. A minimal signed deletion record helps prevent a deleted account returning during recovery. Pilot access requests expire from active intake after 30 days; anonymous daily campaign totals expire after 90 days. Contact support about an earlier request removal.

This public website uses basic server delivery. The signed-in pilot app may offer optional analytics on its public pages only after a separate choice; those analytics do not run on this Zipsail website. We update this notice when practices change. The date above identifies this version.