Privacy Policy

Last updated: October 31, 2026

This Privacy Policy explains how ODIZMA s.a. ("Odizma", "we", "us") collects, uses, stores and shares information when you use Odizma-Hermes-email (the "App") and the website odizma.com.

1. Information we access

When you sign in with Google and grant consent, the App may access the following Google user data through the Gmail API:

• Email messages and metadata (sender, recipients, subject, date, body and attachments) of messages addressed to the business addresses you configure;
• Ability to send email on your behalf and to apply labels to messages;
• Basic Gmail settings, only to set up "Send mail as" addresses you request.

We also keep your Google account email address and an OAuth refresh token so the App can keep working after you sign in.

2. How we use information

• To read customer messages sent to your business addresses and prepare or send replies on your behalf;
• To label handled messages and notify you about messages that need your attention;
• To maintain, secure and troubleshoot the App.

We do not use Google user data for advertising, we do not sell it, and we do not use it to build user profiles for any other purpose.

3. Google API Services User Data Policy

Odizma-Hermes-email's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide and improve the user-facing features described above;
• We do not transfer Google user data to third parties, except as needed to provide the App's features (see section 4), to comply with law, or as part of a merger or acquisition with notice to you;
• Humans do not read your data unless you give explicit consent for specific messages, it is needed for security purposes (such as investigating abuse), or it is required by law;
• We do not use Google user data to train general-purpose artificial intelligence or machine learning models.

4. Sharing and service providers

To draft replies, the content of a relevant message may be processed by an AI language-model provider acting as our processor (for example, Anthropic). These providers process the data only to return a result to us, under terms that do not allow them to use it to train their models. We do not share data with anyone else, except when required by law.

5. Storage and security

OAuth tokens are stored encrypted or with restricted file permissions on systems controlled by Odizma. Data in transit uses TLS. We keep processed message content only as long as needed to handle the conversation and keep a short history of replies, and in any case no longer than 90 days, unless you ask us to keep it longer.

6. Your choices and deletion

• You can revoke the App's access at any time at myaccount.google.com/connections.
• You can ask us to delete all data we hold about you by emailing arik@odizma.com. We delete it within 30 days.
• When access is revoked, we delete stored tokens and stop all processing.

7. Children

The App is intended for business use and is not directed to children under 16.

8. Changes

We may update this policy. We will post the new version on this page and change the "Last updated" date. Material changes will be notified to active users by email.

9. Contact

ODIZMA s.a. — arik@odizma.com