Simetrik Agent Privacy Policy

1. Google data we access

Google access is optional. A user chooses which connector to add and grants access on Google's consent screen. Depending on the connector and permissions approved, the service may access:

• Gmail: messages, threads, headers and metadata, labels, drafts, and related mailbox state needed to search and read threads, create drafts, send email, and label or unlabel messages and threads as directed by the user.
• Google Drive: files, metadata, permissions, and file content needed to search, read, download, copy, or create files as directed by the user.
• Google Calendar: calendar lists, events, attendees, responses, availability, conference details, and related metadata needed to find, create, update, respond to, or delete events as directed by the user.
• Google Chat: messages, conversation details, and related metadata needed to search conversations and messages, read messages, and send messages as directed by the user.
• Authorization information: OAuth access and refresh tokens, granted scopes, token expiry information, and the connected Google account identifier.

2. How we use Google data

We use Google user data only to provide and protect user-facing Simetrik Agent features:

• Answer a user's request about their email, files, calendar, or Google Chat conversations and messages.
• Execute an automation the user explicitly requested or configured.
• Create drafts, send or label email, copy or create files, manage calendar events, and send Google Chat messages.
• Maintain task and conversation continuity so work can be reviewed, resumed, and audited.
• Prevent abuse, investigate failures, and secure the service.

The service does not access a Google product until the user connects that product. Connecting one Google product does not automatically grant access to the others; each appears as a separate connector.

3. AI processing

When a user asks the agent to work with Google content, the minimum relevant content may be sent to an AI model provider to interpret the request and produce the requested result or tool action. OAuth tokens are not included in model prompts. Google user data is not used by Belong Universe to train general-purpose AI models, and we do not permit our service providers to use it for that purpose.

Simetrik Agent may summarize or transform content only as part of the user's requested workflow. It does not build advertising profiles, sell Google data, or use Google data to determine creditworthiness or lending eligibility.

4. Storage and protection

• OAuth tokens are encrypted at rest, protected in transit, and bound to the specific user and connector. They are injected by the server only when calling the connected Google service and are not exposed to the agent model.
• Prompts, relevant tool results, conversation history, task events, and audit records may be retained when needed to run, resume, display, troubleshoot, and secure the user's automation.
• Access is limited by tenant and user identity, and production access is restricted to authorized personnel and service components with a business need.
• We use access controls, encryption, monitoring, and incident-response procedures to protect stored data.

5. Sharing and transfers

We share Google user data only when needed to provide the requested feature: with Google to call the authorized API or Google Workspace MCP server; with infrastructure, storage, monitoring, and AI model providers acting for us under contractual safeguards; with the user's organization as configured by that organization; for security or abuse investigations; or when required by law.

We do not sell Google user data, share it with data brokers, use it for advertising or retargeting, or disclose it for surveillance. Human access is prohibited except with the user's affirmative permission for specific data, when necessary for security, when required by law, or for properly aggregated internal operations.

6. Google API Services User Data Policy and Limited Use

Simetrik Agent's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only for prominent, user-facing automation features that the user requests or configures, plus the limited security and legal purposes allowed by that policy.

7. Your choices and access controls

• Connect Gmail, Google Drive, Google Calendar, and Google Chat separately.
• Review requested permissions before authorizing a connector.
• Review consequential tool actions when an approval is presented.
• Disconnect a connector from Simetrik Agent at any time.
• Revoke access directly from your Google Account connections.

8. Delete your Google data

Disconnecting a Google connector deletes the OAuth credentials stored for that connector and stops future access. To request deletion of Google-derived content in retained Simetrik Agent conversations, tasks, or audit records, email tools@belonguniverse.ai from the account associated with the connection. We may retain narrowly required security, legal, or transaction records where applicable, and will isolate them from normal product use.

9. Changes and contact

We will update this policy before using Google user data for a materially different purpose and will request new consent when required. Questions, privacy requests, and complaints can be sent to tools@belonguniverse.ai.