Google User Data Policy
Last updated — 3 October 2026 · Operated by Nexor Sparks
In short: Kashish uses one Google access, optional read-only Gmail. We never sell it, never use it for ads, and never use it to train generalised AI models.
1. Which Google access Kashish uses
Kashish asks for exactly one kind of Google access, and only if you choose to turn it on:
| Access | Scope | Used for |
|---|---|---|
| Gmail, read-only | https://www.googleapis.com/auth/gmail.readonly | Answering your questions about your own inbox. See the Gmail Access page. |
Kashish does not use Google Sign-In. When you create or use a Kashish account we do not receive your Google name, email address, photo or contacts. We get nothing from your Google Account unless you connect Gmail yourself.
2. What we do with Google user data
- We use it only to give you the feature you asked for: answering your question about your own email.
- We do not sell it or rent it, and we do not use it for advertising of any kind, including personalised or retargeted ads.
- We do not use it to decide credit, lending or insurance, and we do not build profiles from it.
- We do not use it to develop, improve or train generalised AI or machine-learning models.
- Our people do not read your emails. The only exceptions are: you ask us to look at a specific message to help you, we need to investigate abuse or a security problem, or the law requires it.
- We do not transfer it to anyone except the service providers that process your request to produce the reply you see (listed on the Gmail Access page), or where the law requires.
3. Limited Use
Limited Use disclosure. Kashish's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. Storage and security
- The Google access token is kept in your browser's memory only, for about an hour. It is not saved on our servers or in browser storage.
- We do not copy or keep your mailbox.
- Requests to Google and to our services use encrypted connections (HTTPS).
5. Control and removal
- In Kashish: Settings → Gmail → Disconnect. This also revokes the access token with Google.
- In Google: myaccount.google.com/permissions → Kashish → Remove access.
- To delete your Kashish data: Data Deletion.
6. Changes
If we ever ask for more Google access, we will update this page first and ask for your permission in the app. We will not use Google user data for a new purpose without your consent.
7. Contact
help@kashishai.com for questions and requests about Google user data. Company and legal matters: nexor@kashishai.com. See also the Privacy Policy.