Privacy Policy

Data We Process

CometReplyAI processes account details, connected-platform metadata, messages selected for drafting, generated drafts, preferences, usage data, and billing records needed to provide the service.

How We Use Data

We use data to authenticate users, connect approved messaging platforms, generate and send drafts, manage subscriptions, improve reliability, prevent abuse, and support customers.

Google User Data

When you connect a Google account, CometReplyAI requests only the scopes needed to operate the features you use:

• Gmail (read, send, and modify) — to display your messages, draft and send replies on your behalf, and reflect actions such as starring, labeling, archiving, and deleting back to your mailbox.
• Google Calendar (events) — to surface invitations contained in your email and add the events you choose to your calendar.
• Google Tasks — to sync the to-do items you create in CometReplyAI.

We access this data only to provide these features at your request. We do not sell Google user data, and we do not use it for advertising.

Limited Use of Google User Data

CometReplyAI’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking Access

You can revoke CometReplyAI’s access to your Google account at any time. Disconnect the account on the Connect page inside the app, or remove access directly from your Google Account permissions page. Once an account is disconnected, CometReplyAI no longer accesses its data.

AI Processing

To generate a draft, only the message content you select is sent to our AI processing providers for the sole purpose of producing a reply for you. We do not use Google user data to develop, improve, or train generalized AI or machine-learning models. Humans do not read your Google user data except where you explicitly request it, where necessary for security or to comply with applicable law, or in aggregated and anonymized form.

No Sale of Your Data

We do not sell, rent, or trade your data — from Google or any other connected platform — to third parties, and we never share it for advertising. Your messages are used only to provide the features you turn on, and they are never used to train generalized AI or machine-learning models.

Logging

We do not write the contents of your messages to our application logs. Operational logs record events such as timings, error codes, and account identifiers — not the bodies of your emails or messages.

Security

Your data is isolated per user with database-enforced row-level security, connection tokens are encrypted before storage, and all traffic runs over HTTPS. For more detail, see our Security page.

Platform Access

Connected account tokens are encrypted before storage. Users can disconnect platforms at any time from the Connect page.

Retention

We retain account and billing records while an account is active and delete or anonymize message content when it is no longer needed, unless legal obligations require otherwise.

Analytics & Cookies

We do not use Google Analytics or any other third-party analytics, and we set no tracking or advertising cookies. We never send your data to a third-party analytics provider. Any product metrics we keep (such as aggregate feature usage) are computed on our own servers and are not tied to a tracking cookie.

The only cookies we use are essential, first-party ones that keep you signed in and protect your session — these are required for the app to work and are exempt from cookie-consent requirements. We do not sell your data or use third-party advertising trackers.

Contact

Privacy requests can be sent to privacy@cometreplyai.com.