What Information Do We Collect?
Personal information you provide
We collect personal information you voluntarily provide when you use our Services, including Auriga, our AI-powered automation platform. This may include:
- Names
- Email addresses
- Job titles
- Google Workspace data you authorize us to access (including Calendar events, Gmail messages, Drive files, Docs, Sheets, and Slides content)
We do not process sensitive personal information (such as health data, financial account numbers, racial or ethnic origin, or biometric data).
We do not collect information from third-party sources outside of what you authorize via Google OAuth.
Information automatically collected
When you visit or use our Services, certain technical information is collected automatically, including your IP address, browser type, device characteristics, operating system, and usage data (such as pages visited, timestamps, and feature usage). This information is used primarily for security, operations, and internal analytics.
We may also collect information through cookies and similar technologies.
Google API
How Do We Process Your Information?
We process your personal information only when we have a valid legal reason to do so, including:
- To deliver our services — processing calendar events and chat interactions to provide Auriga's assistant functionality
- To improve our services — analyzing usage trends and diagnosing issues
- To communicate with you — responding to support requests and sending service-related updates
- For security and fraud prevention — protecting our systems and users
- To comply with law — meeting applicable legal and regulatory obligations
Legal Basis
Where applicable (including under the GDPR), we rely on the following legal bases for processing:
- Contract performance — processing necessary to provide you with the Services
- Legitimate interest — improving our products, detecting fraud, and ensuring security
- Legal obligation — complying with applicable laws and regulations
- Consent — where you have opted in, such as for marketing communications
When & With Whom Do We Share Your Information?
We may share your information in specific situations with the following third parties:
| Third Party | Purpose | DPA in Place |
|---|---|---|
| Google (Google Workspace APIs, Google Cloud AI) | Core service delivery, authentication, access to Workspace data (Calendar, Gmail, Drive, Docs, Sheets, Slides) | Yes — Google API Services User Data Policy |
| OpenAI | AI-powered response generation | Yes — OpenAI Data Processing Addendum |
| Stripe | Payment processing (if applicable) | Yes — Stripe Privacy Policy |
We do not sell or share your personal information with any third party for advertising or marketing purposes. We may also disclose information as required by law, to protect our legal rights, or in connection with a business transfer or acquisition.
Enterprise customers requiring a Data Processing Addendum may contact us at [email protected].
Cookies & Tracking Technologies
We may use cookies and similar tracking technologies (such as web beacons and pixels) to maintain security, fix bugs, save preferences, and support basic site functions. We also permit certain third-party service providers to use tracking technologies for analytics.
Google Analytics
We use Google Analytics on our website and applications to understand visitor traffic and improve our content. Google Analytics collects information such as how often visitors access our website, what pages they visit, and their IP address. We do not combine the information collected through Google Analytics with other personally identifiable information. Google's ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Service and the Google Privacy Policy.
You may set your browser to refuse cookies, though doing so may affect certain features of the Services.
AI-Based Products
Auriga is an AI-powered assistant. We provide AI functionality through the following third-party AI service providers:
- Google Cloud AI
- OpenAI
Your inputs, outputs, and relevant personal information will be shared with and processed by these providers solely to enable Auriga's functionality. You must not use Auriga in any way that violates the terms or policies of these AI service providers.
Google Workspace API Data
Auriga accesses Google Workspace APIs — including Calendar, Gmail, Drive, Docs, Sheets, and Slides — to the extent authorized by you via OAuth consent. The specific data accessed depends on the features and skills you use.
Limited Use Disclosure
Specifically, we commit to the following:
- We limit our use of Google user data to providing or improving user-facing features that are prominent in our application's user interface.
- We do not transfer Google user data to others except as necessary to provide or improve user-facing features, with the user's affirmative consent, for security purposes, or to comply with applicable laws.
- We do not use or transfer Google user data for serving ads, including retargeting, personalized, or interest-based advertising.
- We do not allow humans to read Google user data unless we have the user's affirmative agreement, it is necessary for security purposes or to investigate abuse, to comply with applicable law, or the data is aggregated and anonymized and used for internal operations.
Social Logins
Our Services offer you the ability to register and log in using your Google account. When you do this, we receive certain profile information from Google, such as your name, email address, and profile picture. We use this information only for the purposes described in this Privacy Notice and do not control Google's own use of your data.
How Long Do We Keep Your Information?
We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Notice, unless a longer retention period is required by law. When we no longer have a legitimate business need to process your information, we will delete or anonymize it. If deletion is not immediately possible (e.g., data stored in backup archives), we will securely isolate it until deletion is feasible.
How Do We Keep Your Information Safe?
We implement appropriate technical and organizational security measures to protect your personal information. However, no electronic transmission over the internet or storage technology can be guaranteed to be 100% secure. While we do our best to protect your data, transmission of personal information to and from our Services is at your own risk. Please access the Services only within a secure environment.
International Data Transfers
ReadyLoop is based in the United States. By using our Services, your personal information may be processed in the United States or other countries where our third-party service providers (such as Google and OpenAI) operate infrastructure. These countries may have data protection laws that differ from those in your jurisdiction.
Do We Collect Information from Minors?
We do not knowingly collect, solicit, or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years old. If we learn that we have collected personal information from a minor, we will deactivate the account and delete the data promptly. Please contact us at [email protected] if you believe we have collected data from a minor.
Your Privacy Rights
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccuracies in your personal data
- Request deletion of your personal data
- Withdraw consent at any time
- Obtain a copy of your personal data
- Opt out of targeted advertising or profiling
To exercise any of these rights, email us at [email protected].
Do-Not-Track Features
Most web browsers include a Do-Not-Track ("DNT") setting. Because no uniform technology standard for DNT has been finalized, we do not currently respond to DNT signals. If a standard is adopted that we are required to follow, we will update this Privacy Notice accordingly. California law requires us to disclose this practice.
US Residents' Specific Privacy Rights
If you are a resident of California, Colorado, Connecticut, Virginia, or other states with applicable privacy laws, you may have additional rights including the right to know, access, correct, delete, and opt out of the sale of personal information.
We have not sold or shared any personal information to third parties for commercial purposes in the preceding 12 months.
To submit a request, email [email protected]. We may need to verify your identity before processing your request. You may also appeal a denied request by emailing us, and if your appeal is denied, you may contact your state attorney general.
California "Shine the Light"
California Civil Code Section 1798.83 permits California residents to request information about personal information disclosed to third parties for direct marketing purposes. To make such a request, contact us using the details below.
Do We Make Updates to This Notice?
Yes. We may update this Privacy Notice from time to time to stay compliant with relevant laws. The updated version will be indicated by a revised date at the top of this page. We encourage you to review this notice periodically.
How Can You Contact Us?
If you have questions or comments about this Privacy Notice, please contact us:
READYLOOP INC
171 Main St, #421
Los Altos, CA 94022
United States
[email protected]
To review, update, or delete the data we collect from you, please email us at the address above with your request. We will respond in accordance with applicable data protection laws.