OrujovAI Workspace Privacy Policy

1. Data we collect

• Your account: your name, email address and profile picture from sign-in, and your settings.
• Your tasks: the instructions you write, the files you upload, the files Workspace makes for you, and each task's history (its steps and answers).
• Your plan and payments: your plan and usage. Card payments are handled by our payment provider; we never see or store your full card number.
• Technical data: your IP address, device and browser, the pages you visit and when, and logs we need to keep the service secure and working.
• Google user data: only if you connect your Google account, as described below.

2. Google user data we access

Connecting Google is optional. When you connect, Workspace asks Google only for the permissions you tick, and uses each one for one purpose:

• Your Google account's basic profile (openid, email, profile): your name, email address and picture, to show which Google account is connected.
• Google Drive, only the files Workspace creates (drive.file): to create Google Docs, Sheets and Slides and to save the files you ask for in a folder named OrujovAI Workspace in your Drive. Workspace cannot see any other file in your Drive.
• Sending email (gmail.send): to send an email from your Gmail after you approve that exact email. This permission cannot read your mail.
• Google Calendar events (calendar.events): to read your events to find free time, and to add or change the events you ask for. Invitations to other people are sent only after you approve them.
• Only for test users who allow it: reading and searching Gmail (gmail.readonly), saving Gmail drafts (gmail.compose) and reading all of your Drive (drive.readonly), used only for the tasks you give Workspace.

3. How we use Google user data

• Only to do the tasks you ask Workspace to do, inside the task you started, and to show you the results.
• Never for advertising, never sold, and never used to build a profile of you or to decide on credit or lending.
• Never used to develop, improve or train AI or machine-learning models, ours or anyone else's.
• People at OrujovAI do not read your Google user data, except with your explicit permission for a specific item, when needed for security (for example to investigate abuse), or when the law requires it. A task that read your Gmail, your Drive or your Calendar is hidden from our team's tools.

4. How we share data

• Our AI model provider processes the content a task needs, only to carry out that task, under terms that do not allow it to use the data to train its models.
• Our infrastructure providers host the service and store data on our behalf, under contract: hosting (Vercel), database and file storage (Supabase), and sign-in (Clerk).
• The law: we disclose data only when the law requires it.
• A change of ownership: if OrujovAI is merged or sold, this policy keeps applying to your data, and we tell you first.
• We do not sell or rent data, and we do not share it with advertisers or data brokers.

5. How we protect data

• All traffic is encrypted in transit (HTTPS).
• Your Google sign-in tokens are encrypted at rest with AES-256-GCM and a key used for nothing else, and they are never sent to your browser or to the AI agent.
• Our database and file storage are encrypted at rest by our provider; only our servers can reach them, and every person's data is kept apart.
• Before Workspace sends an email or an invitation, shares a file or deletes an event, it stops and asks you.

6. How long we keep data, and deleting it

• Google sign-in tokens: until you disconnect Google or delete your account.
• The list of Google files Workspace made for you (names and links): until you delete your account. The files themselves stay in your Drive.
• The log of what Workspace did in Google (the action and the time, never the content): 90 days.
• Approvals: the details you approved (for an email: the recipients, subject and text) for 30 days, and a short record of the action (what, to whom, the subject, when) for one year.
• Your tasks: until you delete them (Settings, Data controls, Delete Workspace history) or your account. Deleting removes the task's steps, answers and files from our systems right away, and our systems keep retrying until everything is gone. For a task that used your Google data we keep no copy of its words; for other tasks we keep a private copy of the title and instructions, as described in the OrujovAI privacy policy.
• Your account: deleting it revokes Workspace's access at Google and deletes your Google connection, your tasks and your files with us.
• You can also ask us to delete your data at support@orujovai.com; we answer within 30 days.

7. Your choices

• Connect Google only if you want to, and choose which permissions to give.
• Turn any Google service off in Workspace, Settings, Google, without disconnecting.
• Disconnect Google at any time in Workspace (Settings, Google, Disconnect) or at myaccount.google.com/permissions. Workspace loses access at once.
• Choose how much Workspace may do without asking you (the approvals setting).

8. Google API Services User Data Policy

OrujovAI Workspace's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide the features of Workspace you use; we transfer it to others only as needed to provide those features, for security, to comply with the law, or as part of a merger or sale with notice to you; we never use it for advertising; and no person reads it except with your permission, for security, to comply with the law, or in aggregated and anonymized form for our internal operations.

9. Children

OrujovAI Workspace is made for companies and professionals. It is not directed to children under 13 (or under the minimum digital-consent age in your country, which is 16 in parts of the EEA).

10. Changes to this policy

When we change this policy we update the date above; for important changes we tell you in Workspace before they apply.

11. Contact

ORUJOVAI LLC, Yeryomenko street 29, apt. 221, Khatai district, Baku AZ1025, Azerbaijan. Email support@orujovai.com or call +994 50 593 52 84.