Privacy Policy

Last updated: November 8, 2025

1. Introduction

PUPIBOT SpA ("we", "our", or "us") operates pupibot.lat (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our AI-powered assistant for Google Workspace.

2. Information We Collect

2.1 Google Account Information

When you authorize PUPIBOT to access your Google Workspace, we receive:

• Your email address and profile information
• OAuth2 access tokens to interact with Google services on your behalf

2.2 Usage Data

We collect information about how you interact with PUPIBOT, including:

• Commands and queries you send to the AI assistant
• Actions performed (e.g., emails sent, documents created)
• Session duration and frequency of use

3. How We Use Your Information

We use your information solely to:

• Provide the PUPIBOT service and execute your commands
• Improve our AI models and user experience
• Ensure security and prevent abuse
• Comply with legal obligations

4. Google API Services User Data Policy

PUPIBOT's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4.1 Limited Use Disclosure

PUPIBOT's use of information received from Google APIs will adhere to Google's Limited Use requirements. This means:

• We only request the minimum scopes necessary for functionality
• We do not use your Google data for advertising purposes
• We do not sell your data to third parties
• We do not use your data for purposes unrelated to providing and improving PUPIBOT

5. Data Storage and Security

We implement industry-standard security measures:

• All data transmission uses HTTPS encryption (TLS 1.3)
• OAuth2 tokens are stored securely in Google Cloud Secret Manager
• Session data is encrypted and has a 30-minute timeout
• We do not store your Google credentials (only OAuth tokens)

6. Data Retention

• Session Data: Deleted automatically after 30 minutes of inactivity
• OAuth Tokens: Revoked when you disconnect PUPIBOT from your Google account
• Usage Logs: Retained for 90 days for security and debugging purposes

7. Third-Party Services

PUPIBOT integrates with:

• Google Workspace APIs: Gmail, Drive, Calendar, Contacts, Tasks, Docs, Sheets
• Google AI (Gemini): For natural language processing
• Cloudflare: For CDN and DDoS protection

Each service has its own privacy policy and data handling practices.

8. Your Rights

You have the right to:

• Access: Request a copy of your data
• Deletion: Request deletion of your data (excluding legally required records)
• Revocation: Disconnect PUPIBOT from your Google account at any time via Google Account Permissions
• Data Portability: Export your conversation history

9. Children's Privacy

PUPIBOT is not intended for users under 13 years of age. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or in-app notification.

11. Contact Us

For privacy-related questions or requests, contact us at:

• Email: privacy@pupibot.lat
• Company: PUPIBOT SpA
• Address: Chile

← Back to PUPIBOT | Terms of Service