Privacy Policy
Last updated: March 2026
Short version: GooodLife.AI reads your Gmail and Calendar via Google's official OAuth. We store the minimum data needed to make the service work. We never sell your data or share it with third parties.
1. What we collect
When you sign in with Google, we receive and store:
- Your Google account email address and display name
- Your Google profile picture URL
- OAuth tokens (access + refresh) needed to read your Gmail, Calendar, and Drive on your behalf
- Your conversation history with GooodLife.AI (stored per session, in our database)
2. How we use Google data
GooodLife.AI accesses your Google account only to respond to your requests in the chat. Specifically:
- Gmail: search, read, and send emails when you ask
- Google Calendar: read events and create/update/delete events when you ask
- Google Drive: search for files when you ask
We do not access any Google data proactively or in the background. Every API call is triggered by your explicit request in the chat.
3. Data storage
Your data is stored in a private SQLite database on our secure server. We store:
- Your user profile (email, name, picture)
- OAuth refresh tokens (encrypted at rest in our database)
- Your chat history (last 40 messages per session)
- Your preferences (timezone, name, custom notes — only if you set them)
We do not store the contents of your emails or calendar events — these are fetched live when you ask and never persisted to our database.
4. Third-party services
We use the following sub-processors:
- Anthropic Claude, served via AWS Bedrock: your messages are sent to Anthropic's Claude model hosted on AWS Bedrock to generate responses. AWS's data privacy terms apply to this data.
- Google APIs: governed by Google's privacy policy and terms of service.
- Stripe: for payment processing. Stripe handles all billing data; we never see your card details.
- Railway: our cloud hosting provider.
We do not sell, rent, or share your personal data with any other third parties.
5. Data retention
Your account data is retained as long as you have an active account. You can request deletion of your account and all associated data by emailing us. Chat sessions older than 90 days may be automatically purged.
6. Your rights
You have the right to:
- Access the data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Revoke Google OAuth access at any time via Google Account permissions
7. Security
We use industry-standard security practices including HTTPS-only communication, secure HTTP-only cookies, and signed session tokens. OAuth tokens are stored in a private database not accessible from the public internet.
8. Contact
Questions about this privacy policy? Contact us at hello@bestguy.ai.