Privacy Policy

Dharma Automations ("Dharma", "we", "us") provides an AI-powered Gmail extension and web dashboard that helps you draft email replies, manage labels, and handle scheduling. This policy explains what data we collect, how we use it, and your rights.

We use your data exclusively to provide the Dharma service:

• Generating AI-assisted email drafts using your selected tone and writing style
• Detecting and responding to scheduling requests in your inbox
• Applying Gmail labels and filters you configure
• Storing your preferences so settings persist across sessions

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

Dharma uses the following third-party services to operate:

• Anthropic (Claude API): email content is sent to Anthropic's API solely to generate draft replies on your behalf. This data is processed transiently and is not used by Anthropic to train or improve their models, consistent with Anthropic's commercial API terms. We do not permit any third party to use your Google user data for advertising or to train generalized AI/ML models.
• Google APIs: we access Gmail and Google Calendar through official Google APIs under your explicit OAuth authorization.
• Vercel: our infrastructure provider for hosting and serverless functions.

We do not persistently store the content of your emails. Email content is processed transiently to generate responses and is not written to our databases. Your preferences and account information are retained until you delete your account.

Dharma requests the following Google OAuth scopes:

• gmail.modify— read your Gmail messages and metadata, and apply labels or change message state (such as marking a message read) when you configure it
• gmail.compose— create draft email replies on your behalf
• calendar.readonly— read your Google Calendar events to suggest meeting times
• calendar.events— create or update calendar events when you confirm a scheduling action

You can revoke access at any time via your Google Account permissions page.

Dharma's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

• We only use Google user data to provide and improve the user-facing features described in this policy.
• We do not transfer Google user data to third parties except as necessary to provide or improve these features, to comply with applicable law, or as part of a merger or acquisition with prior user notice.
• We do not use Google user data for serving advertising, including personalized or interest-based ads.
• We do not allow humans to read your Google user data unless you give specific consent, it is necessary for security or to comply with applicable law, or the data has been aggregated and anonymized.
• We do not use your Google user data to develop, train, or improve generalized or non-personalized AI or machine-learning models.

All data is transmitted over HTTPS. We use industry-standard security practices to protect your information. OAuth tokens are stored securely and never exposed client-side.

You may request deletion of your account and associated data at any time by contacting us. Upon request we will delete your stored preferences and account record within 30 days.

For privacy questions or data deletion requests, contact us at finley@qsbsrollover.com.