Privacy Policy

1. Information We Collect

We collect the following categories of information depending on how you use Alacrio (via our web app or mobile apps):

• Account information — your name, email address, and password (or Google identity) when you create an account
• Gmail data — if you connect Gmail, we access your inbox via IMAP using an app password you generate in your Google Account settings (a standard Google feature, separate from Google sign-in and from Google's OAuth APIs). We read recent unread emails and recently sent emails awaiting a reply — including subjects, senders, recipients, timestamps, and message bodies — to detect threads that may need a follow-up. We read emails only; we never send, modify, or delete any email on your behalf, and your app password is stored securely and used solely for this purpose.
• Google Calendar data — if you connect Google Calendar, we access upcoming event titles, times, attendee lists, and descriptions via the calendar.readonly OAuth scope to detect meetings approaching without preparation notes. We read events only; we never create, modify, or delete any calendar event.
• Slack workspace data — if you connect Slack, we read recent messages from your direct messages and the channels you belong to, to detect messages that may need a reply. We send AI-generated alerts to you via Slack DM or a channel you choose.
• Usage data — page visit metadata (browser type, referring URL, time of visit) collected automatically via standard web analytics
• Payment information — billing details processed by Razorpay if you subscribe to a paid plan. We do not store your card details.

2. How We Use Your Information

We use the information we collect solely to provide and improve the Alacrio service:

• Scanning your Gmail inbox to surface emails that may need a follow-up reply
• Scanning your Google Calendar to detect upcoming meetings that lack preparation notes
• Scanning your Slack messages to detect items that may need a reply
• Generating AI-powered alerts, summaries, and suggested actions based on your email, calendar, and Slack data
• Sending those alerts and suggestions to you via the Alacrio dashboard or Slack
• Remembering your preferences and feedback to improve the relevance of future alerts
• Processing subscription payments
• Communicating important service or policy updates

We will never sell your personal information or Google user data to third parties. We do not use your Gmail, Calendar, or Slack data for advertising, profiling, or any purpose unrelated to providing the Alacrio service to you.

3. Google API Limited Use Disclosure

This section applies specifically to data obtained via Google APIs — currently, your Google Calendar data accessed through the calendar.readonly scope. (Gmail is connected separately via an IMAP app password, as described above, and is not Google API data.) Our use of this data is limited to the following:

• Providing and improving the features visible to you within Alacrio
• Detecting actionable signals (e.g. unprepared meetings) and surfacing them as alerts

We do not use Google user data to develop, improve, or train generalized AI or ML models. We do not transfer Google user data to third parties except to our AI processing provider (Anthropic) solely to generate the alerts and summaries described above, and only to the extent necessary to provide the service. Anthropic processes this data as a data processor under our instructions and does not use it to train its models.

Human access to your Google user data is limited to situations where you have given explicit permission, or where it is necessary for security purposes or to comply with applicable law.

4. AI Processing

Alacrio uses an AI language model provided by Anthropic to analyze your email, calendar, and Slack data and generate alerts and suggestions. When you connect Gmail, Google Calendar, or Slack, relevant data (email subjects and message bodies, meeting titles, attendee names and descriptions, and Slack message content) is transmitted to Anthropic's API for processing. Anthropic acts as a data processor and does not use your data to train its models. Anthropic's privacy policy is available at anthropic.com/privacy.

5. Third-Party Services

We use the following third-party services to operate Alacrio:

• Anthropic — AI language model provider. Processes email, calendar, and Slack data to generate alerts. Privacy policy
• Google — if you connect Google Calendar, calendar data is accessed via the Google Calendar API (calendar.readonly). If you connect Gmail, your inbox is accessed via IMAP using an app password you generate in your Google Account — this does not use Google's OAuth APIs. Privacy policy
• Supabase — database and authentication provider. Stores user accounts, profiles, integration credentials (Google Calendar OAuth tokens, Gmail app passwords, Slack tokens), and notifications. Privacy policy
• Razorpay — payment processor for paid subscriptions. Privacy policy
• Slack — if you connect Slack, we read recent DM and channel messages to detect items needing a reply, and deliver AI-generated alerts to your Slack DM or a channel you choose. Privacy policy
• HubSpot — stores waitlist email addresses. Privacy policy
• Vercel — hosts this landing page. May collect standard server logs. Privacy policy

These services operate under their own privacy policies and data processing agreements.

6. Data Retention

We retain your account data for as long as your account is active. Email, calendar, and Slack content is processed in real time to generate alerts and is not stored beyond what is necessary to deliver those alerts to you. Google Calendar OAuth tokens are stored securely and refreshed automatically; you can revoke Calendar access at any time from myaccount.google.com/permissions or from within Alacrio's Settings page. Your Gmail app password is stored securely and used only to read your inbox as described above; revoke it at any time from myaccount.google.com/apppasswords and disconnect Gmail in Alacrio's Settings page. Slack tokens can be revoked from your Slack workspace's App Management page or by disconnecting Slack in Alacrio's Settings page.

You may request deletion of your account and all associated data at any time by emailing privacy@alacrio.com.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Disconnect your Gmail, Google Calendar, or Slack integration at any time from Settings
• Revoke Google Calendar OAuth access from myaccount.google.com/permissions
• Revoke your Gmail app password from myaccount.google.com/apppasswords
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at privacy@alacrio.com.

8. Cookies

Our website may use minimal cookies for basic functionality and analytics. We do not use advertising or tracking cookies. You can disable cookies in your browser settings at any time.

9. Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, or misuse. OAuth tokens are stored encrypted. All data in transit is protected by TLS. However, no method of transmission over the internet is 100% secure.

10. Children's Privacy

Alacrio is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you by email or via an in-app notice.

12. Contact

For any privacy-related questions or requests, reach us at:
privacy@alacrio.com