Privacy Policy

By using our Service, you consent to the data practices described in this policy. If you do not agree with the practices described herein, please do not use our Service.

We collect information in various ways to provide and improve our Service:

• Account information: name, email address, and payment details when you register
• Communications: information you provide when contacting our support team
• API usage: prompts and queries sent through our API (subject to your logging preferences)
• Google / Gmail authorization data: when you choose to connect your Gmail account, we may access Gmail messages and threads, Gmail draft content, and basic Google account identity information such as your email address and profile information only with your authorization.

• Device information: IP address, browser type, operating system
• Usage data: API call timestamps, response times, token counts
• Log data: server logs for security and performance monitoring

We use the information we collect for the following purposes:

• To provide, maintain, and improve our Service
• To process transactions and send related information
• To respond to your comments, questions, and support requests
• To monitor and analyze usage patterns and trends
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our terms

For Google / Gmail data, we use the data only to provide user-requested email productivity features, such as searching and viewing emails, referencing existing drafts, summarizing emails or drafts, and generating suggested replies inside our Service.

We do not use Gmail data to send, create, modify, or delete emails or drafts; perform mailbox warm-up, cold outreach, spam, or unsolicited commercial email activity; or support advertising, creditworthiness, lending, or unrelated purposes. We do not sell Google user data or use raw, derived, aggregated, or anonymized Google Workspace API user data to create, train, or improve generalized AI or machine learning models.

For enterprise customers with specific compliance, auditing, or operational requirements, we offer optional data logging capabilities. When enabled at the request of enterprise users, we may log API requests and responses including prompts and outputs.

Enterprise data logging is governed by separate enterprise agreements and is only activated upon explicit customer request. Logged data is stored securely and access is strictly controlled according to customer specifications.

We implement industry best practices for data protection, including encryption at rest and in transit, access controls, and regular security audits to ensure the highest level of data security for enterprise customers.

We may share your information in the following circumstances:

• With third-party AI model providers to fulfill your API requests (prompts are sent to the selected model provider)
• With service providers who assist in operating our Service (payment processors, cloud infrastructure)
• To comply with legal obligations, court orders, or government requests
• In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties. We do not use your prompts or API data to train AI models.

Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. If you request an AI feature that requires processing selected Gmail content, that content may be sent to the AI model provider selected or used by us solely to fulfill your request. We do not permit such providers to use Google Workspace API user data to train generalized AI or machine learning models.

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for the Service to function properly. These cannot be disabled.
• Functional Cookies: Remember your preferences and settings. You can disable these in your browser.
• Analytics Cookies: Help us understand how visitors interact with our Service. These are optional.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our Service.

We implement robust security measures to protect your information, including encryption in transit (TLS/SSL) and at rest, access controls, regular security assessments, and secure infrastructure hosted on reputable cloud providers.

Google OAuth tokens and Gmail data are protected using encrypted transmission, secure token handling, access controls, and internal access restrictions, and are accessed only by authorized application components as needed to provide the Gmail integration.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this policy. Account information is retained while your account is active and for a reasonable period thereafter.

API usage logs are retained according to our standard retention schedules unless enterprise agreements specify otherwise. For Google / Gmail data, we retain data only for as long as necessary to provide the Gmail integration, comply with legal obligations, resolve disputes, prevent abuse, or maintain security. You may disconnect Gmail authorization from our Service at any time.

Upon account deletion, Gmail disconnection, or a valid deletion request, we will delete or anonymize your data within a reasonable timeframe, except where retention is required by law.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction.

When we transfer data internationally, we implement appropriate safeguards such as standard contractual clauses or rely on adequacy decisions to ensure your data remains protected.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a portable format
• Opt-out: Unsubscribe from marketing communications at any time

To exercise these rights, please contact us at the email address provided below. We will respond to your request within the timeframe required by applicable law.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: hiservice@himodels.ai