Privacy Policy for ACTI

This Privacy Policy explains how Acti collects, uses, processes, stores, shares, and protects information when you use Acti products and services, including Acti App, Acti Web Dashboard, Acti account services, ACTIER Community, AI-powered features, and Google integrations.

This Privacy Policy also explains how Acti handles Google user data when you choose to connect your Google Account through Google OAuth, including Google Sign-In, Gmail, Google Calendar, and Google Meet integrations.

1. Zero-Keylogging Commitment

Acti does not log, track, or store your everyday data.

Under standard typing conditions, Acti does not monitor your conversations, passwords, searches, private messages, or ordinary text input.

Some Acti features may be available through an optional keyboard extension. The optional keyboard extension does not independently request, store, or use Google OAuth tokens, and it does not directly access Gmail, Google Calendar, or Google Meet APIs.

Google integrations are provided through Acti App, Acti Web Dashboard, or other clearly visible in-app interfaces where you can review the requested access and explicitly authorize the feature.

2. Information We Collect

Acti collects limited information as described below.

A. Ephemeral Execution Data

When you explicitly trigger an Acti action, such as using a Skill Key, selecting text, invoking an AI-powered command, or requesting a specific automation, Acti may securely transmit the current execution context and intent parameters to secure cloud infrastructure to process the request.

Execution context may include highlighted text, text that you intentionally provide to Acti, or content required to complete the specific command you requested.

This data is processed only to generate your requested result. Unless otherwise required to provide a feature you enabled, execution payloads are discarded after the API response is returned to your device.

Acti does not retain logs of everyday typing, prompts, generated content, or ordinary keyboard input.

B. Account and Profile Information

If you create an Acti account or participate in the ACTIER Community, Acti may collect and store:

• Email address
• Username
• Profile information
• Account settings
• Saved Skill Key configurations
• Published Skill Key configurations
• Community content that you choose to publish or share

This information is used to manage your account, synchronize saved Skill Keys, support community features, and provide Acti functionality.

C. Google Account and Google Workspace Data

If you choose to connect your Google Account, Acti may request access to certain Google user data through Google OAuth and Google Workspace APIs.

Acti only accesses Google user data after you explicitly authorize Acti through Google's OAuth consent flow.

Depending on the features you choose to use, Acti may access the following categories of Google user data:

1. Google Account Information

Acti may access:

• Google account identifier
• Name
• Email address
• Profile picture

This information is used to authenticate you, identify your Acti account, display your connected Google account, and provide Google Sign-In.

2. Gmail Data

If you authorize Gmail access, Acti may access Gmail data necessary to provide email-related features you choose to use, which may include:

• Email metadata, such as sender, recipient, subject, timestamps, labels, and thread information
• Email message content and attachments, only when required for a user-facing feature you initiate
• Drafts, sent messages, labels, archived messages, trashed messages, and other mailbox state needed to perform actions you request
• Gmail search results and message lists when you use email search or inbox-related features
• Gmail labels, threads, drafts, and message state when needed to provide requested email management features

Acti uses Gmail data only to provide email features that are visible in Acti App or Acti Web Dashboard, such as reading, searching, composing, sending, modifying, labeling, archiving, moving to trash, or deleting emails as requested by you.

Acti does not automatically read Gmail messages in the background unless such access is necessary for a feature you have enabled and authorized.

3. Google Calendar Data

If you authorize Google Calendar access, Acti may access calendar data necessary to provide calendar-related features you choose to use, which may include:

• Calendar lists and calendar identifiers
• Event titles, descriptions, times, locations, attendees, reminders, conferencing details, and event status
• Calendar event creation, modification, deletion, and synchronization data
• Availability or free/busy information, if required for scheduling features you choose to use

Acti uses Google Calendar data only to display, create, edit, delete, synchronize, schedule, or manage calendar events as requested by you.

4. Google Meet Data

If you authorize Google Meet access, Acti may access Google Meet-related data necessary to provide meeting-related features you choose to use, which may include:

• Meeting spaces
• Meeting links
• Conference records
• Meeting metadata
• Participant information
• Meeting-related status and management data
• Other Google Meet information necessary to provide the feature you request, where supported by the relevant Google APIs

Acti uses Google Meet data only to create, manage, display, organize, or summarize meeting-related information as requested by you.

Acti does not use Google Meet data for unauthorized monitoring, surveillance, tracking, or distribution of meeting content or metadata.

3. Network Access for User-Requested Features

Some Acti features require network connectivity to execute user-requested commands, connect to third-party APIs, process AI-powered actions, or synchronize account data.

Network access is used only for features that you explicitly enable or invoke.

Google Account, Gmail, Google Calendar, and Google Meet integrations require a separate Google OAuth authorization flow. These integrations are not silently enabled through general network access or keyboard permissions.

4. How We Use Information

Acti uses collected information only for operational, security, and user-facing purposes, including:

• Authenticating users and managing Acti accounts
• Providing Google Sign-In when you choose to connect your Google Account
• Routing and executing specific AI commands through authorized third-party Large Language Models and APIs
• Providing Gmail features you explicitly choose to use, such as reading, searching, composing, sending, modifying, labeling, archiving, moving to trash, or deleting emails
• Providing Google Calendar features you explicitly choose to use, such as viewing, creating, editing, deleting, synchronizing, scheduling, or managing calendar events
• Providing Google Meet features you explicitly choose to use, such as creating, displaying, managing, organizing, or summarizing meeting-related information
• Managing your account and synchronizing saved Skill Keys across your devices
• Supporting ACTIER Community features when you choose to publish or share content
• Detecting and preventing abuse, API spamming, fraudulent activity, unauthorized access, or violations of the Terms of Service
• Analyzing aggregated, de-identified telemetry data, such as app crash logs and overall feature usage, to improve stability and reliability

Acti does not use Google user data for advertising, retargeting, personalized ads, interest-based advertising, credit-worthiness evaluation, lending decisions, or sale to third parties.

5. Third-Party AI Providers and Data Routing

To fulfill explicit user-requested commands, Acti may route necessary execution context to authorized AI models, APIs, or service providers.

Acti processes execution context only when you intentionally trigger a feature that requires such processing.

Google Workspace data, including Gmail, Google Calendar, and Google Meet data, is not automatically routed to third-party AI providers.

Google Workspace data is processed by AI providers only when you explicitly invoke an AI-powered feature that requires that data, and only for the purpose of generating the result you requested, such as summarization, drafting assistance, scheduling assistance, or meeting productivity support.

Acti does not sell, rent, or trade personal data to advertisers, data brokers, or other third parties.

Where Acti uses third-party service providers to process data on its behalf, those providers are authorized to process the data only as necessary to provide the requested service.

6. Google API Services and Limited Use Compliance

Acti's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

For Google Workspace APIs, including Gmail, Google Calendar, and Google Meet APIs, Acti follows these principles:

• Acti only requests access to Google user data that is necessary to provide user-facing features that are visible and prominent in Acti App or Acti Web Dashboard.
• Acti only uses Google user data to provide or improve the specific Google integration features that you choose to use.
• Acti does not sell Google user data.
• Acti does not transfer Google user data to advertising platforms, data brokers, information resellers, or similar third parties.
• Acti does not use Google user data for serving ads, retargeting, personalized advertising, or interest-based advertising.
• Acti does not use Google user data to determine credit-worthiness or for lending purposes.
• Acti does not use Google Workspace API data to create, train, or improve generalized machine learning or artificial intelligence models.
• Acti does not use Google user data for unauthorized surveillance, monitoring, profiling, or tracking.
• Acti does not allow humans to read Google user data except in the limited circumstances described below.

Acti employees, contractors, or service providers may access Google user data only when:

• You have explicitly consented to such access for a specific support or troubleshooting purpose;
• Access is necessary for security purposes, such as investigating abuse, unauthorized access, system errors, or service integrity issues;
• Access is necessary to comply with applicable law, regulation, legal process, or enforceable governmental request; or
• The data has been aggregated and anonymized and is used only for internal operations, security, or service improvement.

If you choose to use an AI-powered feature that processes Gmail, Google Calendar, or Google Meet data, such processing is performed only to provide the specific user-facing feature you requested. Acti does not use Google Workspace API data to train generalized AI models.

7. Business Transfers

If Acti is involved in a merger, acquisition, reorganization, bankruptcy, financing, sale of assets, or similar business transaction, account information may be transferred as part of that transaction.

If such a transfer materially changes how personal information or Google user data is handled, Acti will provide notice by email, in-app notice, or another appropriate method before the information becomes subject to a different privacy policy.

Google user data will not be transferred in a manner that violates the Google API Services User Data Policy, including the Limited Use requirements.

8. Data Retention

A. Execution Data

When you explicitly trigger an AI action or Acti command, execution context is processed only for the purpose of generating the requested result.

Unless otherwise required to provide a feature you enabled, execution payloads are discarded after the API response is returned to your device.

B. Google OAuth Tokens

If you connect your Google Account, Acti may securely store OAuth access tokens and refresh tokens to maintain your connection and provide the Google integration features you enabled.

OAuth tokens are encrypted at rest and transmitted only over secure protocols.

If you disconnect your Google Account, revoke access, delete your Acti account, or if Acti no longer needs the permissions previously granted, Acti will revoke and delete the relevant tokens where technically feasible.

C. Google User Data

Acti retains Google user data only for as long as necessary to provide the Google integration features you choose to use, comply with legal obligations, resolve disputes, prevent abuse, or enforce agreements.

Where possible, Google user data is processed transiently and not permanently stored.

If a feature requires synchronization, caching, search indexing, history, or user-requested storage, Acti retains only the minimum data necessary to provide that feature.

D. Account Data

Account data is retained only for as long as your account is active.

If you delete your account, profile data, email address, private Skill Keys, connected account metadata, stored OAuth tokens, and stored Google user data associated with your account will be permanently purged from Acti databases within 30 days, unless a longer retention period is required by law, security, fraud prevention, or dispute resolution obligations.

E. Community Data

If you publish Skill Keys, configurations, comments, or other content to the ACTIER Community, that content may remain visible until you delete it or request removal.

If you delete your account, Acti may remove or anonymize community content associated with your profile, unless retention is required for safety, abuse prevention, legal compliance, or service integrity.

9. Global Privacy Rights

Depending on your location, such as the European Economic Area, United Kingdom, California, or other applicable jurisdictions, you may have specific rights regarding your personal data.

These rights may include:

• The right to access personal data held about you
• The right to request correction of inaccurate data
• The right to request deletion of personal data
• The right to data portability
• The right to object to or restrict certain processing
• The right to opt out of non-essential analytics tracking where applicable
• The right to withdraw consent where processing is based on consent

To exercise any of these rights, please contact Acti at [email protected].

Acti will respond within the legally required timeframe.

10. Google Account Controls and Data Deletion

You can manage your Google connection and Google user data in the following ways:

• Disconnect your Google Account from Acti in the App settings
• Revoke Acti's access from your Google Account permissions page
• Delete your Acti account from the App
• Contact Acti at [email protected] to request access, correction, export, or deletion of your data

After you disconnect your Google Account or revoke access, Acti will stop making new requests to Google APIs on your behalf.

Acti will delete stored OAuth tokens and Google user data associated with your account, unless retention is required by law, security, fraud prevention, abuse prevention, dispute resolution, or other legitimate obligations.

11. Security

Acti uses technical, organizational, and administrative safeguards designed to protect personal information and Google user data.

These safeguards may include:

• Secure transmission using HTTPS or equivalent secure protocols
• Encryption of OAuth tokens and sensitive credentials at rest
• Access controls and authorization checks
• Logging and monitoring for abuse, fraud, and unauthorized access
• Data minimization and purpose limitation
• Internal policies restricting human access to user data

No system can be guaranteed to be completely secure. Acti is designed to minimize the amount of sensitive data processed and to limit access to only what is necessary to provide user-facing features.

12. Children's Privacy

Acti is not intended for individuals under the age of 13, or under the minimum age required by applicable law in certain jurisdictions.

Acti does not knowingly collect personal information from children.

If Acti becomes aware that it has inadvertently collected personal information from a child, reasonable steps will be taken to delete such data.

13. Changes to This Policy

Acti may update this Privacy Policy periodically to reflect changes in technology, law, Google API requirements, product features, or operations.

If material changes are made to how Acti collects, uses, stores, shares, or processes personal information or Google user data, Acti will provide notice through email, in-app notice, or another appropriate method.

Where required by law or applicable platform policy, Acti will request consent before applying material changes to how data is used.

14. Contact

For privacy-related inquiries, data deletion requests, Google user data questions, or compliance questions, please contact:

Email: [email protected]
Website: https://openacti.com