Privacy Policy

Introduction

Sapt.ai ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

If you connect a Google account to Sapt, please also read Google User Data and Limited Use and Artificial Intelligence and Third-Party AI Providers, which describe exactly what Google data Sapt accesses, how it is used, and who processes it.

Google User Data and Limited Use

Sapt offers optional integrations with Google services. You are never required to connect a Google account to use Sapt. When you choose to connect one, Sapt requests access through Google OAuth and you can review and approve the requested permissions before any access is granted.

Google API Scopes We Request

https://www.googleapis.com/auth/calendar.readonly — Read-only access to your Google Calendar, used to check your existing booked meetings and availability so Sapt can show your schedule and avoid double-booking.
https://www.googleapis.com/auth/calendar.events — Used to create, update, and manage calendar events on your calendar at your direction (for example, booking a meeting you have asked Sapt to schedule).

We request the minimum scopes required to deliver these user-facing features. Google Calendar data is accessed only to check your booked meetings and to create or manage events on your calendar, at your direction.

Google API Services User Data Policy — Limited Use

Sapt's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

How Google User Data Is Handled in Our AI Integration

Sapt does not host, build, train, or fine-tune its own AI or ML models. Sapt uses a third-party AI provider: Anthropic (Claude, via the Anthropic API).
Where Google Calendar data is passed to that AI provider, it is used solely to generate the response to your specific request. Anthropic is the only AI provider that receives Google user data.
Google user data is never used to develop, train, test, fine-tune, or improve any AI or ML model — by us or by our AI provider. We maintain contractual terms with our AI provider that prohibit training on customer data.
We do not sell Google user data, use it for advertising or ad targeting, or transfer it to any other third party beyond the AI provider named above, except where required by law.
Human access to Google user data is restricted to what is strictly necessary to operate and support the service, investigate a security incident, or comply with applicable law — and only with your consent where required.

Retention, Deletion, and Revoking Access

We retain Google user data only for as long as needed to provide the connected feature. You may disconnect your Google account from within Sapt at any time, or revoke Sapt's access directly from your Google Account permissions page. When you revoke access or delete your Sapt account, we delete the Google user data we hold, other than data we are required to retain by law. You can also request deletion at any time by emailing privacy@sapt.ai.

Artificial Intelligence and Third-Party AI Providers

Sapt uses AI to power agent reasoning, content generation, and automation. For full transparency: Sapt does not host, build, train, or fine-tune its own AI or ML models. We rely on third-party AI providers, and your data is sent to them only to process your specific request.

Anthropic (Claude, via the Anthropic API) — our primary AI provider, used for agent reasoning, content generation, and tool orchestration. This is the only AI provider that processes Google user data.
Google Gemini (via Google AI / Vertex AI) — used for supplementary multimodal and content analysis features. It is not used to process data received from Google Workspace APIs.

No data you provide to Sapt — and no data received from Google APIs — is used to train, fine-tune, or improve any AI or ML model. See our Security & Compliance page for additional detail on data isolation and subprocessors.

Information We Collect

Information You Provide

Account information (name, email address, password)
Business information (company name, website, phone number)
Payment information (processed securely through third-party payment processors)
Communications with us (support tickets, inquiries)
Any other information you choose to provide

Information From Connected Accounts

Data from third-party accounts you choose to connect, such as Google Calendar events and availability — see Google User Data and Limited Use
The basic profile information (such as name and email address) associated with the account you connect

Information Collected Automatically

Device information (IP address, browser type, operating system)
Usage data (pages visited, features used, time spent)
Cookies and similar tracking technologies
Log data and analytics

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process transactions and send related information
Send administrative information, updates, and security alerts
Respond to your comments, questions, and customer service requests
Monitor and analyze trends, usage, and activities
Detect, prevent, and address technical issues and security threats
Comply with legal obligations

Data received from Google APIs is used only to provide and improve the user-facing features you have connected it to, as described in Google User Data and Limited Use. It is never used for advertising, sold, or used to train AI or ML models.

Information Sharing and Disclosure

We may share your information with:

Service Providers: Third-party vendors who perform services on our behalf
AI Providers: The third-party AI providers listed in Artificial Intelligence and Third-Party AI Providers, solely to generate the response to your request
Business Transfers: In connection with a merger, acquisition, or sale of assets
Legal Requirements: When required by law or to protect our rights
With Your Consent: When you explicitly authorize us to share information

We do not sell your personal information to third parties. We do not transfer data received from Google APIs to any third party other than the AI provider named above, except where required by law.

Data Security

We implement appropriate technical and organizational security measures to protect your information, including encryption in transit and at rest and access controls that limit who can reach your data. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Data received from Google APIs is retained only as long as needed to provide the connected feature and is deleted when you revoke access or delete your account.

Your Rights

Depending on your location, you may have the following rights:

Access to your personal information
Correction of inaccurate data
Deletion of your information
Restriction of processing
Data portability
Objection to processing
Withdrawal of consent

To exercise these rights, please contact us at privacy@sapt.ai.

Cookies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@sapt.ai
Address: Michigan, United States