Beta draft – pending legal review
How ONE uses Google data
This is a draft for the public beta. It has not yet been reviewed by lawyers and may change in the final version.
Connecting Gmail and Google Calendar is coming soon; today ONE does not connect to Google or read any Google data. This page describes how ONE will use Google data once it opens: connecting will be optional, Gmail and Google Calendar will be connected separately, and ONE will ask only for the permissions a feature you turn on needs.
Limited Use
ONE's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. ONE does not use Google Workspace API data to develop, improve, or train generalized or non-personalized AI and/or ML models. Content needed to complete a request you make is sent to our AI model provider (OpenRouter) only to produce that result. During the beta, ONE uses free model endpoints through OpenRouter. Requests are routed only to providers that OpenRouter lists as not collecting data, but we have no contract with the model providers that forbids them from using your input to improve their models. Please do not give ONE passwords, bank card or account numbers, health information or other sensitive data.
What each permission is for
- Basic profile (your Google account email). To show which Google account is connected.
- Read Gmail (gmail.readonly). To import a message you search for and select as evidence for a task (plain text only); to read the copy of an email ONE sent for you in your Sent folder and check it matches what you approved; and, only if you turn them on, to check threads linked to your active tasks for new replies and to keep a minimal index of message IDs, labels and dates (no subjects or bodies). ONE never modifies or deletes your mail.
- Send Gmail (gmail.send). To send an email only after you approve that exact email. Each email is addressed to the recipient you reviewed and carries a notice that an AI assistant sent it.
- Calendar events on calendars you own (calendar.events.owned). To create an event only after you approve its full details and read it back to confirm it was created; and, only if you turn it on, to keep minimal fields of your primary calendar (event ID, status, title, start and end) for following up on tasks.
- Free/busy (calendar.events.freebusy, optional). Requested separately, to find busy and free times when you ask ONE to suggest a time. Event titles and descriptions are not read.
What ONE never does with Google data
- Sell it, or use it for advertising.
- Use it to train general AI or machine-learning models.
- Send, create or change anything without your approval of that specific action.
- Transfer it to others except to provide the features you use, to comply with the law, for security, or as part of a merger or sale under the same protections.
- Let people read it, except with your explicit agreement for specific data (for example, a task you let ONE support staff help with), when needed for security or to investigate abuse, to comply with the law, or in aggregated and anonymized form for internal operations.
Storage and retention
Connection tokens are encrypted at rest and stored with your account in the United States. Imported content stays with the task it belongs to until you delete it or your account. Relevant Google content can also appear in saved AI planning records and backups. The bodies of new planning transcripts created by the current version are encrypted in the database with service-managed keys; separately stored usage, summaries, indexes and other service metadata are not covered by this encryption. Historical files from older versions and older backups may still contain plaintext until handled under the applicable migration, deletion and retention procedures; importing history does not by itself delete source files. Account deletion removes planning records from the active account; older backup copies follow the retention policy described in the Privacy Policy.
Disconnecting
You can disconnect Google in ONE's settings at any time; ONE then removes its tokens and asks Google to revoke its access. Deleting your ONE account does the same. If ONE still appears in Google account permissions, remove it there.
During the beta, Google may show a warning that it has not finished verifying ONE. Continue only if you are comfortable; you can use ONE without connecting Google.
Questions
Write to goldrusher9009@gmail.com. See also the Privacy Policy.