Privacy Policy

WithAI, Inc. (“WithAI,” “we,” “us,” or “our”) operates the website withai.co and the WithAI desktop application (together, the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have. It includes specific disclosures about how the Service handles data from Google services such as Gmail and Google Calendar when you choose to connect them.

1. Information we collect

Information you provide. When you contact us or express interest in the Service, we may collect your name, email address, and company.

Google user data. Only if you choose to connect a Google account, and with your explicit consent, the Service requests the following Google API scopes:

• gmail.readonly — to read your email metadata (sender, subject, date, and message ID) so the dashboard can display and organize your inbox. The Service accesses message metadata only. It does not download or store the full body content of your Gmail messages.
• gmail.send — to send email on your behalf when you compose or reply from within the Service.
• calendar and calendar.events — to read and manage the calendar events shown in your dashboard.

Local application data. Configuration, preferences, and a local cache of the data above, stored on your own device.

2. How we use information

• To provide and operate the dashboard: display your inbox and calendar, organize and prioritize messages, generate summaries, and create one-click links that open a message directly in Gmail.
• To respond to your requests and provide support.
• To secure, maintain, and improve the Service.

3. How Google user data is stored and processed

Local-first storage. Google data retrieved by the Service (email metadata and calendar events) is stored locally on your device. Your Google OAuth tokens are likewise stored locally on your device. This data is not stored on WithAI servers.

AI processing. To classify, prioritize, and summarize your messages for the dashboard, the Service sends message metadata (such as sender and subject) to our AI provider, Anthropic, accessed through Amazon Web Services (AWS) Bedrock. This processing is performed solely to provide the dashboard features to you. Data sent for this purpose is not used to train AI models.

One-click open. When you open a message, the Service may call a Google Apps Script, running as you under your own authorization, to resolve a direct link to that message in Gmail.

4. Limited Use disclosure

WithAI’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it except where you explicitly consent, where necessary for security purposes, or where required by law.

5. Sharing and disclosure

We do not sell your personal information. We share information only with:

• Service providers and subprocessors who help us operate the Service (for example, Anthropic and AWS for AI processing), bound by obligations to protect it.
• Legal and safety: when required by law or to protect the rights and safety of users and the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets.

6. Data retention and your choices

• You can disconnect a Google account at any time from within the Service, and you can revoke the Service’s access from your Google Account permissions page.
• Because Google data is cached locally, you can remove it by disconnecting the account and clearing the local application data on your device.
• Contact us to request deletion of any information we hold about you.

7. Security

We use reasonable technical and organizational measures to protect information. The local-first design keeps your Google data on your device by default. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

8. Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information.

9. International users

We are based in the United States. By using the Service, you understand that your information may be processed in the United States and other countries.

10. Changes to this Policy

We may update this Policy from time to time. We will post the updated version on this page and revise the date above.

11. Contact

Questions about this Policy or your data? Email ian@withai.co.