Privacy Policy

Last updated: March 31, 2026

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and payment information (processed by Razorpay/Stripe — we never see full card numbers).

Email Access (OAuth Only)

We use Google OAuth and Microsoft OAuth to access your email. We never ask for or store your email password. OAuth tokens are encrypted and stored securely.

Email Content (Temporary Processing)

We temporarily process email subject lines, body text, sender information, and attachments to generate AI scores and draft replies. This data is processed in real-time and never stored permanently on our servers.

2. How We Use Your Information

• Generate AI priority scores for your emails
• Create draft replies in your voice
• Push calendar reminders for deadlines
• Send your daily task briefing email
• Track credit usage for billing
• Improve our AI scoring accuracy (anonymized, aggregated data only)

3. What We Never Do

• Never store your email body or attachments
• Never sell your data to third parties
• Never use your emails for advertising
• Never share individual email content with anyone
• Never store your email password (OAuth only)

4. Data Encryption

All data is encrypted in transit and at rest using industry-standard encryption. Connection tokens are stored in encrypted database fields with separate key management.

5. Third-Party Services

We use the following third-party services:

• Google APIs — Gmail, Google Calendar, Google Workspace (OAuth 2.0)
• Microsoft Graph API — Outlook, Microsoft 365, Outlook Calendar (OAuth 2.0)
• Razorpay & Stripe — Payment processing (PCI DSS compliant)
• AI Processing — Email scoring and draft generation

6. Data Retention

Email content: Never stored. Task scores and metadata: Retained while your account is active. Account data: Deleted within 30 days of account deletion. Payment records: Retained as required by law.

7. Your Rights

• Export all your data as JSON at any time
• Delete your account and all data with one click
• Disconnect email integrations at any time
• Request a copy of all data we hold about you

8. Google API Services User Data Policy

DailyTaskProAI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Gmail and Google Calendar data only to provide the AI-powered email triage, prioritization, draft reply, and calendar features visible inside DailyTaskProAI.
• We do not transfer Google user data to third parties except as necessary to provide our service (e.g., approved sub-processors under data protection agreements), to comply with applicable law, or as part of a merger, acquisition, or asset sale (with continued protection of user data).
• We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
• We do not allow humans to read Google user data unless: we have your explicit consent for specific messages, it is necessary for security investigations, to comply with applicable law, or for aggregated/anonymized usage analysis that does not identify any individual user.
• We do not use Google user data to develop, improve, or train generalized or general-purpose AI/ML models. AI scoring uses Google data only to produce results for the specific user, and the data is not retained by the AI provider for training.

OAuth Scopes We Request

We request the minimum scopes required for our features:

• userinfo.email + userinfo.profile — identify the signed-in user and personalize the dashboard.
• gmail.readonly — read inbox content for AI scoring, priority ranking, and reply generation.
• gmail.send — deliver replies the user has reviewed and approved.
• gmail.compose — create AI-drafted replies in the user's Gmail Drafts folder for review.
• calendar.readonly — surface upcoming events in the daily briefing and detect scheduling conflicts.
• calendar.events — create or update events when the user explicitly schedules a task on their calendar.

Users may revoke access at any time at myaccount.google.com/permissions or from Settings → Integrations inside DailyTaskProAI.

9. Data Retention

For full details on how long we keep each category of data and how to request deletion, see our Data Retention Policy.

10. Contact

For privacy questions: privacy@dailytaskproai.com

For security disclosures: security@dailytaskproai.com