Privacy Policy

Information we process

We process account and workspace information you provide, product activity needed to operate and secure the service, and information from systems you choose to connect. We use this information to provide TradeFlow, support users, prevent abuse, maintain reliability, and meet legal obligations.

Google and Gmail data

If you connect Gmail, TradeFlow requests only the Gmail read-only permission. It reads recent inbound messages and threads so customer email can appear beside calls, texts, leads, and follow-up work in your workspace. TradeFlow cannot send, reply to, change, move, or delete anything in Gmail.

The connector may use message headers, thread membership, timestamps, subjects, and message content references to group email into conversations, match it to customer work, and avoid duplicates. Google account access begins only after an authorized user chooses Connect Gmail and grants consent.

How Google user data is used

Google user data is used only to provide and improve the user-facing Gmail inbox features you request. We do not sell Google user data, use it for advertising, or use it to train general-purpose artificial intelligence or machine-learning models.

TradeFlow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and protection

Gmail OAuth credentials are stored in Google Cloud Secret Manager. TradeFlow's application database stores a reference to that secret rather than the credential itself. Provider identifiers are hashed where the product only needs a stable match, and durable application records use restricted, value-safe references where practical. We use access controls, workspace isolation, encryption in transit, and operational monitoring to protect information.

Sharing

We share information only with service providers that help operate TradeFlow, when you direct us to, as part of a business transaction with appropriate protections, or when required to protect rights, safety, and comply with law. Service providers may process information only to perform services for TradeFlow under applicable confidentiality and security obligations.

Retention and your choices

We retain information for as long as needed to provide the service, secure it, resolve disputes, and meet legal obligations. You can revoke TradeFlow's Google access at any time in your Google Account connections. You may also ask us to disconnect an integration, delete eligible workspace data, or close an account. Revoking access stops future Gmail reads but does not automatically remove information already processed in TradeFlow.

Contact

For privacy questions, access or deletion requests, or concerns about Google data, email theo@tradeflowsystems.ai.