Privacy
Policy

This Privacy Policy explains how AutoText Inc. ("AutoText", "we", "us", or "our") collects, uses, discloses, and otherwise processes personal information when you use our software, browser extensions, websites, and related services (collectively, the "Service").

If you do not agree with this Privacy Policy, do not use the Service.

AutoText is an AI-powered productivity service. Today, the Service is primarily delivered through browser-based experiences that can integrate with third-party applications and accounts that you choose to connect.

When you connect third-party accounts, we access and process information from those accounts only as authorized by you and as needed to provide the Service.

1. Personal Information We Collect

We collect the following categories of personal information (the specific information we collect may vary depending on how you use the Service).

1.1 Information You Provide to Us

• Account information, such as your name, email address, and identifiers associated with your account.
• Communications, such as information you provide when you contact support, respond to surveys, or otherwise communicate with us.

1.2 Information We Obtain From Connected Third-Party Services and Accounts

If you connect the Service to a third-party application or account, we may access and process information from that third party as authorized by you. This may include content and related metadata from the third-party service.

For example, if you connect Gmail, this may include email message content and related metadata, including attachments where applicable.

1.3 Information Processed Through the Service (Input and Output)

• Input means information you submit to the Service or that the Service processes on your behalf when you use it (including content you authorize the Service to access).
• Output means content generated or returned by the Service based on Input.

Input and Output may include personal information, depending on what you choose to include or connect.

1.4 Usage, Device, and Technical Information

We may automatically collect:

• Usage information, such as feature usage, activity logs, and interaction information.
• Device and connection information, such as browser type, device identifiers, IP address, and approximate location derived from IP address.
• Diagnostic and performance information, such as error reports, performance logs, and related troubleshooting data. Diagnostic and performance information (such as logs and error reports) may include Input and Output and, depending on your use of the Service, content from connected accounts.

1.5 Billing Information

If you subscribe to a paid plan, payments are processed by Stripe. We do not store your full payment card number. We may receive and store information related to your subscription, such as payment status, subscription details, and associated billing identifiers.

1.6 Cookies, Local Storage, and Similar Technologies

We and our service providers may use cookies, local storage, pixels, scripts, SDKs, and similar technologies to operate and manage the Service, improve performance, remember preferences, prevent fraud and abuse, and understand how the Service is used.

We do not currently use cookies for advertising. Some cookies may be set by the Service or our service providers for functionality, security, fraud prevention, or analytics, depending on how you use the Service. The Service may use local storage and similar technologies.

You can control cookies through your browser settings and can typically clear local storage through your browser or device settings. If you disable or clear storage mechanisms, some features of the Service may not function properly.

2. How We Use Personal Information

We use personal information to:

• Provide, maintain, and improve the Service, including generating Output based on Input, optimizing performance, and developing new features.
• Operate, troubleshoot, and support the Service, including diagnosing issues, troubleshooting and debugging, responding to support requests, and improving reliability.
• Maintain safety and security, including preventing fraud, abuse, and security incidents, and enforcing our Terms of Service.
• Communicate with you, including sending service-related messages (such as account, billing, and operational notices) and, where permitted, marketing communications.
• Comply with law and protect rights, including responding to lawful requests and protecting the rights, safety, and property of AutoText and others.

We may also aggregate or de-identify personal information so that it no longer identifies you, and use that information for the purposes described above (for example, to analyze how the Service is used and improve features). We will maintain de-identified information in de-identified form and will not attempt to reidentify it, except as required by law.

2.1 Google API Data and Limited Use

AutoText’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

The use of raw or derived user data received from Workspace APIs will adhere to the Workspace API Services User Data and Developer Policy, including the Limited Use requirements.

When you connect a Google account, the Google OAuth consent screen and this Privacy Policy describe the Google user data we access and how it is used and shared.

We may also provide additional in-product privacy notices or explanations in the Service (for example, before you connect a third-party account) to help users understand how we handle Google user data.

In practical terms, this means we use Google user data to provide and improve user-facing features of the Service, and we do not sell Google user data or use it for targeted advertising.

3. How We Share Personal Information

We do not sell personal information, and we do not "share" personal information for cross-context behavioral advertising. We do not process personal information for "targeted advertising" purposes (as those terms are defined under applicable US state privacy laws).

We may disclose personal information in the following circumstances:

3.1 Vendors and Service Providers

We may disclose personal information to third-party vendors and service providers that help us operate, provide, and improve the Service. These may include providers of hosting, cloud infrastructure, AI model services, analytics, customer support, safety monitoring, communications, payment processing, and compliance services.

These providers may process personal information only as necessary to perform services on our behalf and consistent with our instructions and applicable law.

Subprocessors. A list of subprocessors we use to operate the Service is available at https://autotext.com/subprocessors.

3.2 AI Processing Vendors

To generate Output, the Service may transmit Input to third-party AI model providers acting on our behalf.

• We do not use the content of emails or messages you authorize the Service to access to train AutoText’s own general-purpose machine learning models.
• If Input includes Google user data (such as Gmail content), we use and transfer that data consistent with the Google API Services User Data Policy, including Limited Use requirements.

Third-party AI model providers process Input under their applicable terms and policies. Where available, we may use provider features or controls related to data handling, and in other cases we may rely on provider default settings and terms.

3.3 Business Account Administrators

If you use the Service through an account associated with an organization (for example, your employer) or as part of a team plan, administrators may be able to access and manage certain account-related information and usage information (such as your email address, account status, membership, and billing and usage metrics) to administer the organization’s account.

Administrators do not receive access to the content you authorize the Service to access and process through connected third-party accounts (such as email content), unless you choose to share that content with them.

3.4 Legal Compliance and Protection of Rights

We may disclose personal information to government authorities or other third parties if we believe doing so is necessary to comply with law, respond to lawful requests, protect the rights and safety of any person, prevent fraud or security incidents, enforce our Terms of Service, or protect AutoText from legal liability.

3.5 Business Transfers

If we are involved in a merger, acquisition, financing, restructuring, bankruptcy, or sale of some or all of our assets, personal information may be disclosed in connection with due diligence or transferred as part of that transaction.

3.6 With Your Consent

We may disclose personal information when you direct us to do so or otherwise provide consent.

4. Retention

We retain personal information only for as long as necessary to operate the Service and for legitimate business purposes such as troubleshooting and debugging, support, safety and security, dispute resolution, enforcement of our agreements, and legal compliance.

Retention periods vary depending on the type of information and the purposes for which it is processed. For example:

• Some information is processed transiently or retained for short periods for performance, security, and diagnostics.
• Input and Output may be retained in logs, diagnostics, and backups for limited periods for troubleshooting, debugging, security, and compliance purposes.
• We may retain certain records to comply with legal obligations (including tax, accounting, and audit requirements), even after you request account deletion.

Access to logs and error reports that may contain user content is restricted to authorized personnel and is permitted only as needed for legitimate business purposes such as troubleshooting and debugging, support, safety and security, and legal compliance.

Account deletion. If you request account deletion, we will delete your account record and revoke access tokens and connected-account authorizations. Some information may remain in logs, diagnostics, and backups for limited periods, and will be deleted or expire as part of our normal retention cycles.

When personal information is no longer needed, we take steps designed to delete, de-identify, or anonymize it, consistent with applicable law and our legitimate business needs.

5. Security

We implement commercially reasonable technical and organizational measures designed to protect personal information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on where you live, you may have certain rights in relation to your personal information, which may include the right to access, delete, correct, or obtain a copy of your personal information, and to object to or restrict certain processing. Depending on where you live, you may also have the right to data portability.

If you are in the EEA or the UK, you may have the right to lodge a complaint with your local supervisory authority.

6.1 Disconnect Third-Party Access

If you have connected a third-party account, you can typically revoke the Service’s access through that third party’s settings. You can also stop data collection through the extension by uninstalling or disabling it.

6.2 Marketing Communications

You may opt out of marketing-related communications by using the unsubscribe link in those messages or by contacting us at support@autotext.com. You may still receive service-related communications (for example, billing or operational notices).

6.3 Cookies and Similar Technologies

You can typically control cookies through your browser settings and can clear local storage through your browser or device settings. If you disable or clear storage mechanisms, some features of the Service may not function properly.

6.4 Account Deletion and Privacy Requests

To request account deletion or exercise privacy rights, contact us at support@autotext.com from the email address associated with your account. We may request additional information to verify your identity and process your request.

If you use the Service through an organization or team plan, your organization may have additional control over your account. You may also need to contact your organization’s administrator for certain requests.

6.5 Authorized Agents and Appeals

Where applicable, you may use an authorized agent to submit a request on your behalf. We may request proof that the agent is authorized to act for you.

If we deny your request, you may appeal by replying to our response or contacting support@autotext.com.

We will not discriminate against you for exercising any privacy rights available under applicable law.

6.6 No Automated Decisions

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

6.7 Additional Information for EEA, UK, and Switzerland Users

If you are located in the EEA, the UK, or Switzerland, AutoText generally processes personal information when:

• it is necessary to perform a contract with you (for example, to provide the Service),
• it is necessary to comply with legal obligations,
• it is in our legitimate interests (for example, to secure the Service, prevent abuse, and improve reliability), and those interests are not overridden by your rights, or
• you have provided consent (where required), which you may withdraw as permitted by law.

7. International Transfers

AutoText is based in the United States, and we may process personal information on servers located in the United States and other jurisdictions. Data protection laws vary by location. Where required, we transfer personal information only in accordance with legally valid transfer mechanisms, such as standard contractual clauses or other safeguards.

8. Children

The Service is not intended for individuals under 18 (or under the age of majority where higher). We do not knowingly collect personal information from such individuals. If we learn or have reason to suspect that a user is under the minimum age, we may investigate and, if appropriate, delete the personal information and/or the account.

If you believe a minor has provided us personal information, contact us at support@autotext.com. We may take steps to delete that information as appropriate, although some information may remain in logs and backups for limited periods.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated Privacy Policy and update the "Last updated" date above.

If we make material changes, we will provide additional notice as required by law (for example, by email or through the Service). The updated Privacy Policy will be effective as of the "Last updated" date, unless otherwise stated.

Your continued use of the Service after the update becomes effective means you acknowledge the updated Privacy Policy, to the extent permitted by law.

10. Contact Us

You may contact us at:

• Email: support@autotext.com
• Mail: AutoText Inc., 2261 Market Street STE 86776, San Francisco, CA 94114, United States