This document describes how Imbue handles data obtained from your Google Account via Google OAuth when you use Minds. It covers raw data retrieved from Google APIs and data we derive from it (including aggregated or anonymized data), together "your data from Google." For your data from Google, this document controls wherever it differs from our Product Privacy Policy; for everything not addressed here, the Product Privacy Policy applies.
Access. Depending on the permissions you grant, Minds accesses: your Google profile (name, email, picture); Gmail data (messages, including content, metadata, attachments, and labels); Google Calendar data (events, attendees, availability); Google Drive data (files and metadata), including Google Docs, Sheets, and Slides content; Google Contacts data (names, email addresses, phone numbers, and related contact details); and Google Analytics data (site and app usage reports and configuration for properties you administer). Derived data includes summaries, drafts, extracted tasks, and personalization data. We request only the scopes needed for Minds's features.
Use. We use your data from Google to provide and improve user-facing features of Minds, including reading, drafting, organizing, scheduling, and executing tasks you direct your agent to perform, to personalize your individual experience, and for security, troubleshooting, and legal compliance. We do not use it for advertising and do not sell it.
Sharing. Your data from Google is shared only as necessary to provide these features: with AI model providers (e.g., Anthropic, OpenAI) via commercial APIs whose terms prohibit training on the data, solely for real-time processing; with our cloud hosting providers; and where required by law or to protect security. We do not sell your data from Google or transfer it to data brokers or advertisers.
When you direct your agent to send, share, or transmit data to third parties — for example, by instructing it to send an email, share a file, or transmit information to a service you have configured — those transfers occur at your direction and are governed by the recipients' terms, not this policy. Because Minds runs open-source agent software that you may configure or modify, data handling performed by agent code you have modified, or by third-party integrations you have added, acting on your instructions is your responsibility.
If Imbue is involved in a merger, acquisition, or sale of assets, your data from Google will only be transferred to the successor entity after we provide prominent notice and obtain your explicit consent.
Humans at Imbue do not read your data from Google except with your consent, for security or legal reasons, or in aggregated, anonymized form for internal operations.
AI/ML. Your data from Google that is obtained through Google Workspace APIs is not used to develop, improve, or train generalized AI/ML models. It may be used for models personalized to you alone. It is not transferred to third-party AI services that train their models on it.
Protection. Your data from Google is encrypted in transit and at rest. Each user's agent runs in an isolated, per-user environment, OAuth credentials are stored securely and never shared with model providers, and internal access is restricted and logged.
Retention and Deletion. Your data from Google is retained while your account is active and deleted when you delete it or delete your account, within 30 days except where law requires retention. Residual copies may persist in encrypted backups for up to 90 days after deletion before being purged in the ordinary course. You can revoke Minds's access anytime at myaccount.google.com/permissions; revoking access stops further collection from Google, and previously obtained data remains subject to this section until you delete it or your account.
Limited Use Statement. Minds's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
If we change how we handle your data from Google, we will update this document and, where required, obtain your consent before materially expanding how we use it.
Questions: privacy@imbue.com