Obvious Privacy Policy

Obvious integrates with Google API Services to enhance collaboration and productivity within our platform. This section describes how we access, use, store, share, and protect Google user data in compliance with the Google API Services User Data Policy.

Data Accessed from Google Services

When you connect your Google account to Obvious, we may access the following types of Google user data, depending on the specific integrations you enable:

Google Calendar:

• Calendar events (title, description, date, time, location, attendees)

• Calendar metadata (calendar names, IDs, settings)

• Event creation, modification, and deletion capabilities

Gmail:

• Email messages (subject, body, sender, recipients, timestamps)

• Email metadata (folders, labels, read/unread status)

• Draft creation and management

• Email sending capabilities

Google Drive

• File metadata (names, types, sizes, modification dates)

• File content for documents, spreadsheets, and presentations

• Folder structure and sharing permissions

How We Use Google User Data

We use Google user data exclusively to provide and enhance the functionality you request within the Obvious platform:

Calendar Integration:

• Display your calendar events within Obvious workspaces

• Create, update, and delete calendar events from within Obvious

• Analyze scheduling patterns to suggest optimal meeting times

• Sync calendar data with project timelines and task management features

Email Integration:

• Access and display email messages within Obvious projects

• Send emails directly from the Obvious platform

• Create and manage email drafts

• Thread email conversations with project context

• Extract actionable items from email content using AI assistance

AI-Powered Features:

• Process Google user data through our AI models (listed in Third-Party Data Processors section) to provide:

  • Email summarization and key point extraction

  • Calendar event suggestions and scheduling optimization

  • Automated task creation from email content

  • Meeting notes and action item generation

Important Limitations:

• We only access Google data that you explicitly authorize through OAuth consent screens

• We never access Google data without your explicit permission

• You can revoke access at any time through your Google Account settings

Sharing of Google User Data

With Third-Party AI Processors:

When you use AI-powered features on Google user data, we may share limited, contextually relevant portions of that data with our AI service providers (Anthropic, OpenAI, Google Gemini, AWS Bedrock) solely to:

• Generate summaries, insights, or content based on your requests

• Perform natural language processing and analysis

• Provide intelligent suggestions and automation

Important Safeguards:

• Only the minimum necessary data is shared to fulfill your specific request

• AI processors are contractually prohibited from using your data to train their models

• Data is processed ephemerally and not retained by AI providers beyond the immediate request

• All transmissions are encrypted in transit

With Other Third Parties:

We do not sell, rent, or share your Google user data with third parties for their own marketing or commercial purposes. Google user data is shared only as described above or as required by law.

Storage and Protection of Google User Data

Storage Practices:

• Google user data is stored in our secure AWS infrastructure with encryption at rest

• Calendar and email data are cached temporarily (up to 24 hours) to improve performance

• Long-term storage occurs only for data you explicitly save to Obvious projects

• We maintain logical separation between different users' Google data

Security Measures:

• All access to Google user data requires authentication and authorization

• Data transmission uses TLS 1.2+ encryption

• Access logs are maintained for security monitoring and audit purposes

• Regular security assessments and penetration testing

• Role-based access controls limit employee access to Google user data

Data Minimization:

• We request only the minimum Google API scopes necessary for functionality

• We fetch only the specific data needed for your requested operations

• Cached data is automatically purged according to retention schedules

Retention and Deletion of Google User Data

Retention Periods:

• Cached Data: Automatically deleted after 24-48 hours

• Project-Saved Data: Retained as long as you maintain it in your Obvious projects

• Deleted Projects: Google user data within deleted projects is permanently removed within 30 days

• Account Deletion: All Google user data is deleted within 30 days of account closure

User-Initiated Deletion:

You can delete your Google user data from Obvious at any time by:

1. Disconnecting Google Integration: Go to Settings → Integrations → Google → Disconnect

   • This immediately revokes Obvious's access to your Google account

   • Cached data is purged within 24 hours

2. Deleting Specific Projects: Delete projects containing Google data

3. Deleting Your Account: Request full account deletion at compliance@obvious.ai

   • All data, including Google user data, is permanently deleted within 30 days

Revoking Access:

You can revoke Obvious's access to your Google account at any time through:

• Google Account Permissions Page

• Obvious Settings → Integrations → Google → Disconnect

Once access is revoked, we can no longer access your Google data, and all cached data is deleted within 24 hours.

Compliance with Google API Services User Data Policy

Obvious's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide or improve user-facing features that are prominent in the requesting application's user interface

• We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger or acquisition (with user notice)

• We do not use Google user data for serving advertisements

• We do not allow humans to read Google user data unless:

  • We have your explicit consent for specific data

  • It is necessary for security purposes (e.g., investigating abuse)

  • It is required to comply with applicable law

  • The data has been aggregated and anonymized