Effective June 17, 2026
Privacy Policy
nagu is an email client and mail intelligence layer for nagu.app. This policy explains what we process, why we process it, and the boundaries around Google Workspace and AI features.
What we process
We process the information needed to operate your account, sync your mail, prepare your inbox, and support the product. This can include account identifiers, connected mailbox metadata, message headers, message bodies, attachments when needed for a requested feature, drafts, labels, triage state, calendar availability if connected, and support messages you send us.
- Mail data is used to show your inbox, classify threads, prepare briefs, search, and draft replies.
- Calendar data is used only for schedule-aware context when that feature is connected.
- Operational logs are used for security, reliability, abuse prevention, and debugging.
- We do not sell your personal data or raw email content.
Notice to Google users
nagu's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not transfer, sell, or use user data obtained through the Google Workspace API to create, train, or improve a machine learning or artificial intelligence model beyond that specific user's personalized model for the appropriate use case or user-facing feature.
Google Workspace data is processed only to provide user-facing mail, triage, search, summary, drafting, calendar-aware, security, and sync features for the account that connected the data.
Google Workspace scope justification
| Scope | Use | Justification |
|---|---|---|
| gmail.readonly | Read your mail to triage and brief. | Allows the inbox, priority queues, thread summaries, search, and for-you brief to reflect the messages in the connected account. |
| gmail.modify | Archive or label mail on your behalf. | Allows approved inbox actions, labels, archive, spam, trash, and undoable triage changes to sync back to Gmail. |
| gmail.send | Send drafts you approve. | Allows a user-approved draft to be sent only after you confirm the send action inside the product. |
| calendar.readonly | Make mail help schedule-aware. | Allows availability-aware briefs and drafting context without creating, editing, or deleting calendar events. |
AI processing
AI features process mail content only to provide the feature you are using, such as triage, summaries, for-you briefs, search assistance, and draft replies. For LLM processing, nagu uses a Zero Day Data Retention posture: prompts, message excerpts, tool context, and model outputs are processed for the requested feature and are not used to train provider models.
Named AI processors and their retention posture are listed on AI processors.
How we share data
We share data only with service providers needed to operate nagu, comply with law, protect the service, or complete an action you request. Providers are bound to process data for the instructed purpose. We do not sell Google Workspace data, and we do not permit service providers to train general AI models on it.
Retention by surface
Retention is not one blanket number. Different layers keep different things for different reasons — and the LLM providers keep nothing. Here is what is retained where, and why:
| Surface | What is retained | Why |
|---|---|---|
| LLM provider traffic | Nothing — zero-day retention by contract; no training on content. | Providers run inference only and are contractually blocked from training. |
| App artifacts (briefs, summaries, drafts, receipts) | Kept in your account until you delete them. | These are the product — user-owned objects you came back for. |
| Ask logs and advisor queries | Kept for quality and debugging, with a clear control offered. | Reliability and your own personalization; clearable by you. |
| Operational logs | Kept for security, reliability, abuse prevention, and debugging. | Safety and uptime — never used to train models. |
| Local cache and projection | Local-first; cleared on disconnect or sign-out. | Speed only — never the system of record. |
Export and deletion
You can disconnect your Google account, request export, or request deletion of your account data at any time by contacting help@creative-int.com. App artifacts you created are deleted with your account; local cache clears the moment you disconnect or sign out.
Contact
Questions about this policy can be sent to help@creative-int.com.