Privacy Policy

1. Who We Are

Aparna AI ("we", "our", "us") operates https://aparnaai.com (the "Service"). Questions: privacy@aparnaai.com

2. Data We Collect

Account data

Name, email, and profile photo from Google sign-in (via Clerk).

Google Workspace data (with your explicit permission)

• Gmail: sender, recipient, subject, date, 200-char snippet. We do not store full email bodies.
• Calendar: event title, attendees, start/end time.
• OAuth tokens (encrypted at rest) to make requests on your behalf.

We request read-only access only. The scopes used are gmail.readonly, calendar.readonly and userinfo.email. Aparna AI cannot send, delete or modify your email or calendar events. AI-written follow-ups are shown to you as drafts in the app, and you send them yourself from your own email client.

⚠ Google data is used solely to provide the Service. Never sold. Never used for ads.

Usage data

Page views and feature events via Google Analytics 4 (IP anonymized). Error logs for reliability.

Payment data

Processed by Dodo Payments, our Merchant of Record, which handles billing, tax and card data. We store only your Dodo customer ID and subscription status — never card details.

3. How We Use Your Data

• Generate daily AI briefings and pre-meeting context
• Draft AI follow-up emails on your behalf
• Track relationship health and surface dormant contacts
• Send transactional emails (billing receipts, subscription updates)
• Improve the Service via aggregated, anonymized analytics

We do not use your data to train AI models or sell to any third party.

4. Google API Limited Use Disclosure

Aparna AI's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We request only scopes necessary to provide the Service
• We do not allow humans to read your emails (except for security/legal with consent)
• We do not use Gmail or Calendar data for advertising
• We do not permanently store full email bodies

5. Data Sharing

• Anthropic — AI inference (prompts sent to Claude API; Anthropic privacy policy applies)
• Google — Gmail/Calendar sync via Google APIs
• Dodo Payments — Payment processing and Merchant of Record
• Clerk — Authentication
• Neon / Vercel — Database and app infrastructure

We do not sell personal data to any third party.

6. Data Retention

• Active accounts: retained while subscription is active
• Cancelled accounts: deleted within 30 days
• Backups purged within 90 days
• Request immediate deletion: privacy@aparnaai.com

7. Security

TLS 1.3 in transit. AES-256 at rest. OAuth tokens encrypted. Access restricted to authenticated personnel. Regular security reviews.

8. Your Rights

• Access, correct, or delete your personal data
• Revoke Google OAuth access (Google Account → Third-party access)
• Port your data in machine-readable format
• Object to processing (GDPR Art. 21)
• Lodge a complaint with your local data protection authority

Email privacy@aparnaai.com — we respond within 30 days.

9. Cookies

Essential cookies for authentication (Clerk session) and analytics (GA4). See our Cookie Policy.

10. Children

Service not directed to children under 16. Contact privacy@aparnaai.com if you believe a child has provided data.

11. Changes

Material changes notified by email ≥14 days before effect. Continued use = acceptance.

12. Contact

Aparna AI — privacy@aparnaai.com