Privacy Policy
This Privacy Notice for Tadata Inc. ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit tadata.com, use our application or connect your third-party accounts (such as Google services) to our platform, or engage with us in other related ways.
Questions or concerns? Contact us at support@tadata.com. By creating an account or signing up for our Services, you acknowledge that you have read, understood, and agree to this Privacy Notice, including our use of session recording and analytics as described herein.
Summary of Key Points
- What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. This includes data collected through session recording and analytics tools.
- Do we process any sensitive personal information? No.
- Do we collect any information from third parties? No.
- How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
- Do we use Google user data? Yes, if you connect your Google account to our Services. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet can be guaranteed to be 100% secure.
- How do you exercise your rights? Submit a data subject access request or contact us at support@tadata.com.
1. What Information Do We Collect?
Personal information you disclose to us
We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. The personal information we collect may include: names, usernames, phone numbers, email addresses, and contact or authentication data.
We do not process sensitive information. We may provide you with the option to register with us using your existing social media account details, like your Google, Facebook, or other social media account.
Information automatically collected
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes. The information we collect includes:
- Log and Usage Data: Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services.
- Device Data: Information about your computer, phone, tablet, or other devices you use to access the Services.
- Location Data: Information about your device's location, which can be either precise or imprecise.
- Client Application Data: Information collected from the specific client application used to interact with the product.
- Session Recording Data: We use session recording technology (powered by Mixpanel) to record and analyze how you interact with our Services. This may include mouse movements, clicks, scrolls, keystrokes (excluding sensitive fields like passwords), page navigation, and other interactions with our user interface. Session recordings help us understand user behavior, identify usability issues, and improve our Services.
We use Mixpanel as our analytics and session recording provider. For more information about how Mixpanel handles data, please visit their privacy policy. By creating an account or signing up for our Services, you consent to our use of session recording and analytics as described in this Privacy Notice.
2. Google API Services User Data Disclosure
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
2.1 Data Access and Justification
Our application integrates with Google services to provide core functionality. We only request access to the narrowest scopes necessary to provide the following prominent, user-facing features:
| Google API Scope | Data Accessed & Used | User-Facing Feature |
|---|---|---|
| gmail.modify | Read, compose, send, delete, and manage emails | AI-Driven Action and Reply Automation: creating drafts, archiving/labeling emails, analyzing email content to identify follow-up tasks |
| calendar | View, edit, share, and manage calendars and calendar events | Intelligent Scheduling: creating, updating, and managing calendar events identified through email analysis or user input |
| documents | Read and manage Google Docs | AI Content Generation: creating, editing, or searching the user's Google Docs based on commands or tasks |
| spreadsheets | View, edit, create, and delete spreadsheets in Google Sheets | AI Data Management: creating, editing, or searching the user's Google Sheets based on commands or tasks |
| drive | View, edit, create, and delete files in Google Drive | AI Data Management: accessing and organizing files based on commands or tasks |
2.2 Limited Use Policy Compliance
If you grant Tadata access to your Google data, our use of that data is subject to these additional, strict requirements mandated by the Google API Services User Data Policy:
- No Selling: We will NOT sell Google user data to any third party, under any circumstances.
- No Advertising Use: We will NOT use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
- No General AI/ML Training: We will NOT use Google user data to create, train, or improve generalized machine learning or artificial intelligence models. Google data is only used for personalized, user-specific AI/ML features within your individual account.
- Limited Transfer: We will NOT transfer or share Google user data with any third party, except as necessary to provide the prominent, user-facing features of the app, for security purposes, to comply with applicable laws or regulations, or as part of a merger or acquisition with explicit prior user consent.
2.3 Human Access Restrictions
Human access to Google user data is strictly prohibited, except: with your explicit, documented consent for a specific support purpose; when necessary for security purposes (such as investigating abuse or a security breach); or to comply with applicable laws, regulations, or valid legal processes.
2.4 Google User Data Deletion
Upon your request to delete your account or any Google user data, we will promptly delete all Google user data from our systems and all backup archives. You may request deletion by contacting us at support@tadata.com or through the account settings in our application.
2.5 Data Security for Google Data
We implement appropriate technical and organizational security measures to protect Google user data, including: encryption of data in transit using TLS/SSL protocols; encryption of data at rest; access controls limiting data access to authorized personnel only; and regular security assessments and monitoring.
3. How Do We Process Your Information?
We process your personal information for the following reasons:
- To facilitate account creation and authentication and otherwise manage user accounts.
- To deliver and facilitate delivery of services to the user.
- For analytics and product improvement, including through session recording via Mixpanel, to analyze how users interact with our Services, identify usability issues, and improve user experience.
- To provide user-facing features. We process Google user data solely to provide or improve the prominent, user-facing features described in Section 2.1.
- To save or protect an individual's vital interest.
4. What Legal Bases Do We Rely On to Process Your Information?
We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law. We may rely on the following legal bases: Consent, Performance of a Contract, Legal Obligations, and Vital Interests.
If you are located in the EU or UK, the General Data Protection Regulation (GDPR) and UK GDPR apply. If you are located in Canada, we may process your information if you have given us specific permission (express consent) or in situations where your permission can be inferred (implied consent).
5. When and With Whom Do We Share Your Personal Information?
We only share your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law, including: with your consent; to fulfill contractual obligations; to comply with legal obligations; or to protect your vital interests. We do not sell your personal information.
6. Do We Offer Artificial Intelligence-Based Products?
As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies. All personal information processed using our AI Products is handled in line with our Privacy Notice. Google user data processed by our AI features is used exclusively for personalized, user-specific features within your individual account. We do NOT use Google user data to train generalized AI/ML models.
7. How Do We Handle Your Social Logins?
Our Services offer you the ability to register and log in using your third-party social media account details (like your Google or other social media account). Where you choose to do this, we will receive certain profile information about you from your social media provider. The profile information we receive will often include your name, email address, and profile photo. We will use the information we receive only for the purposes that are described in this Privacy Notice.
8. How Long Do We Keep Your Information?
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. No purpose in this Notice will require us keeping your personal information for longer than three (3) months past the termination of the user's account.
Upon your request to delete your account or any Google user data, we will promptly delete all Google user data from our systems and all backup archives. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.
9. How Do We Keep Your Information Safe?
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. These measures include:
- Encryption of data in transit using industry-standard TLS/SSL protocols
- Encryption of data at rest
- Regular security assessments and vulnerability testing
- Access controls and authentication mechanisms
- Secure token storage and management
- Employee security training and awareness programs
However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.
10. Controls for Do-Not-Track Features
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.
11. Do United States Residents Have Specific Privacy Rights?
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to:
- Know whether or not we are processing your personal data
- Access your personal data
- Correct inaccuracies in your personal data
- Request the deletion of your personal data
- Obtain a copy of the personal data you previously shared with us
- Non-discrimination for exercising your rights
- Opt out of the processing of your personal data if it is used for targeted advertising or sale of personal data
To exercise these rights, contact us by submitting a data subject access request or by emailing us at support@tadata.com.
12. Do We Make Updates to This Notice?
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.
13. How Can You Contact Us About This Notice?
If you have questions or comments about this notice, you may email us at support@tadata.com or contact us by post at:
Tadata Inc.
548 Market St PMB 766478
San Francisco, CA 94104
United States
14. How Can You Review, Update, or Delete the Data We Collect From You?
Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To exercise this right, please contact us at support@tadata.com.
You may disconnect your Google account from our Services at any time through your account settings. Upon disconnection or upon your request, we will revoke OAuth tokens, cease processing your Google data, and delete all Google user data from our systems.