Privacy Policy

Effective Date: August 25, 2025 Company Name: Imua Nui, LLC Contact Email: privacy@imuanui.ai Website: https://imuanui.ai

1. Information We Collect

Email Content & Metadata

• Email subject lines, body content, sender/recipient information
• Purpose: Generate AI-powered draft responses and automate workflows
• Scope: Only emails you explicitly choose to process through our Add-on

Business Configuration Data

• Response templates, tone preferences, pricing information
• Calendar integration settings and workflow automations
• Purpose: Personalize your experience and maintain your business preferences

Account Information

• Name, email address, Google account identifiers
• Purpose: Account management, customer support, and billing

2. How We Use Your Information

• AI Response Generation: Process email content through OpenAI's API to create draft responses
• Workflow Automation: Create calendar events and manage business processes that you determine to be helpful in operating your business
• Service Improvement: Analyze anonymized usage patterns to enhance features
• Customer Support: Provide technical assistance and resolve issues
• Legal Compliance: Meet regulatory requirements and protect our rights

3. Data Sharing and Third Parties

We DO NOT sell, rent, or trade your personal information. We share data only with:

Essential Service Providers

• Google APIs: Access Gmail, Calendar, Drive data with your explicit permission
  • Gmail API is used to read and compose emails to generate an email draft response
  • Calendar API is used to create and edit events related to confirmed jobs in your service-based businesses
  • Drive API is used to store extracted images from emails that are then added to calendar events to provide helpful context for confirmed service jobs.  
• OpenAI: Process email content for AI response generation (only necessary content sent)
• Hosting: Backend services hosted on Replit platform

Legal Requirements

We may disclose information if required by law, court order, or to protect our rights and safety.

4. Data Security and Storage

Security Measures 

• All data encrypted in transit using TLS 1.3
• OAuth-based authentication with Google’s security standards
• Database security managed by hosting provider (Replit)
• Application-level access controls and session management

Data Storage

• Primary database: PostgresSQL hosted on Replit platform
• Geographic location: United States (Replit infrastructure)
• Data isolation: Application-level user data separation
• Backup management: Handled by hosting provider (Replit)

5. Data Retention

• Email Content: Processed in memory, not permanently stored unless you save templates
• Business Settings: Retained while your account is active, plus 30 days after cancellation
• Account Information: Maintained for 3 years after account closure for legal compliance
• Usage Analytics: Anonymized data retained for up to 2 years

6. Your Rights and Controls

Access and Portability

• Request a copy of your data by emailing privacy@imuanui.ai

Deletion Rights

• Delete your account and associated data anytime through account settings
• Request immediate data deletion by contacting privacy@imuanui.ai
• Note: Some data may be retained for legal compliance as described above

Revoke Permissions

• Revoke Gmail/Calendar access anytime in your Google Account Settings
• Uninstall the Add-on to immediately stop data processing

7. International Data Transfers

If you're located outside the United States, your data will be transferred to and processed in the US. We implement appropriate safeguards including:

• Standard Contractual Clauses for EU users
• Adequacy decisions where applicable
• Additional security measures for international transfers

8. Compliance Frameworks

Google API Services User Data Policy

• We comply with Google's Limited Use requirements
• Use Gmail data solely for features you request
• No human review of email content except for debugging with your explicit consent

GDPR Compliance (EU Users)

• Lawful basis: Contract performance and legitimate interests
• Right to access, rectify, erase, and port your data
• Right to object to processing and withdraw consent
• Data Protection Officer contact: dpo@imuanui.ai

CCPA Compliance (California Users)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (note: we do not sell personal information)
• No discrimination for exercising these rights

9. Cookies and Tracking

Our website uses:

• Essential cookies: Required for basic functionality
• Analytics cookies: Google Analytics with IP anonymization
• Preference cookies: Remember your settings and choices

You can control cookies through your browser settings.

10. Children's Privacy

Our Service is not intended for users under 18. We do not knowingly collect personal information from minors. If you believe we have collected information from a minor, please contact privacy@imuanui.ai.

11. Breach Notification

In the unlikely event of a security breach affecting your personal information, we will:

• Notify you within 72 hours of discovery
• Provide details about the breach and our response
• Offer guidance on protective measures you can take

12. Changes to This Policy

We may update this Privacy Policy to reflect service changes or legal requirements. We will:

• Post updates at https://imuanui.ai/privacy
• Email users about material changes affecting data use
• Provide 30 days notice for significant changes

13. Contact Information

Privacy Questions: privacy@imuanui.ai General Support: support@imuanui.ai

Mailing Address: Imua Nui, LLC 23 B Duffy Pl  San Rafael, CA 94941