Legal

Privacy Policy

Last updated: July 2026

This policy describes how IOSYA handles personal information when you use our website and product.

Scope

This notice applies to visitors to the IOSYA marketing site and to customers who register for or use the IOSYA workspace.

Product-specific data handling may also be described in your agreement or in-product settings.

Information we collect

Depending on how you interact with IOSYA, we may process:

  • Account and contact details you provide when registering or requesting a demo.
  • Workspace content you choose to connect, such as files, messages, or integrations enabled by your team.
  • Usage and technical data needed to operate, secure, and improve the service.
  • Communications you send to us, including support and sales requests.

How we use information

We use collected information to provide and maintain the IOSYA workspace, respond to requests, enforce acceptable use, meet legal obligations, and improve reliability and security.

We do not sell personal information through this website.

Google user data

When you connect a Google account to IOSYA, we request access to certain Google user data through Google OAuth. This section describes what we access, why, how we store it, and how you can withdraw access.

What we access

If you connect a Google Sign-In account to log in, we access your Google account email address and basic profile (name), used only to create and identify your IOSYA account.

If you choose not to grant the requested Google permissions, IOSYA will not be able to connect your Google account. As a result, Google-based features such as Gmail and Calendar integration, synchronization, and AI-powered assistance for those services will not be available. Refusing to grant these permissions does not affect your ability to use other IOSYA features that do not rely on Google integrations.

If you connect the Gmail and Calendar integration, we request the following scopes:

  • Gmail (https://mail.google.com/) — read, send, and manage messages in your Gmail mailbox. Used to display your mail in the IOSYA unified inbox, synchronize messages, send messages you compose, and allow the in-product assistant to read and draft replies on your instruction.
  • Google Calendar (https://www.googleapis.com/auth/calendar) — read and manage your calendars and events. Used to display your calendar in IOSYA, keep events in sync, and allow the assistant to answer scheduling questions and help plan.
  • Email address (https://www.googleapis.com/auth/userinfo.email) — the email address of the connected Google account, used to label the connected account in your settings.

How we store it

Google access and refresh tokens are stored in a dedicated secrets vault, protected by access control and encryption in transit. Message metadata and calendar event data are stored in our databases; full message bodies are stored in IOSYA’s internal storage. We do not store this data in your Google Drive.

Retention

We retain connected Google data for as long as the integration remains connected. We do not currently apply an automatic time-based deletion schedule to this data.

When you disconnect the integration, we delete your stored access and refresh tokens and stop further synchronization. Data that was previously synchronized to IOSYA may remain in your workspace after disconnection. You can delete synchronized emails and other stored content at any time through the IOSYA interface.

How to withdraw access

You can disconnect your Google account at any time in IOSYA integration settings. Disconnecting removes the access and refresh tokens stored by IOSYA and stops further synchronization. To fully revoke IOSYA’s access on Google’s side, review and remove IOSYA from your Google Account security settings at https://myaccount.google.com/permissions.

How we do not use it

We do not use Google user data for advertising, and we do not sell it or share it with third parties for their own purposes. We do not use Google user data to train generalized AI models.

Data is shared only to the extent necessary to fulfill the specific request initiated by you. IOSYA does not use Google user data to train generalized AI models, and requests third-party AI providers solely to perform inference required to provide the requested functionality.

AI-generated suggestions, summaries, and draft responses are provided solely as an assistance tool. Users are responsible for reviewing, editing, verifying, and deciding whether to send or otherwise act upon AI-generated content.

Once a user chooses to submit data for AI processing, such data is processed by the selected third-party AI provider in accordance with that provider’s applicable privacy practices and terms. IOSYA does not control and is not responsible for how such third-party providers store, retain, delete, disclose, or otherwise process data after it has been transmitted to them.

IOSYA does not guarantee the successful or timely delivery of AI-generated messages or other content transmitted through third-party services. Delivery may be affected by the availability, policies, or technical limitations of those services.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy.

To provide the assistant features you request, relevant message and calendar content may be transmitted, on a per-request basis, to the following third-party AI service providers solely for the purpose of processing your request and providing the functionality you have requested:

  • OpenAI — to generate AI-powered responses, summaries, and other requested assistant functionality.
  • Mistral AI — to generate AI-powered responses, summaries, and other requested assistant functionality.
  • Groq — to process AI inference requests and generate the requested assistant functionality.
  • Together AI — to process AI inference requests and generate the requested assistant functionality.

Sharing and retention

We share information with service providers who help us run the product, when required by law, or with your direction (for example, integrations you enable).

We retain information for as long as needed to provide the service, resolve disputes, and comply with applicable obligations.

Cookies and analytics

We use essential cookies to remember your cookie preferences and to keep core site features working.

Analytics and measurement tools load only after you accept analytics cookies in the cookie banner. You can change this choice at any time via Cookie settings in the site footer.

Until you opt in, we do not run third-party analytics counters on your visit.

Your choices

Depending on your location, you may have rights to access, correct, delete, or restrict certain processing of your personal data.

To exercise these rights or ask a privacy question, contact us using the details below.

Contact

For privacy requests about IOSYA, email info@iosya.com with the subject line “IOSYA privacy request”.

For where workspace data is hosted and how European sovereignty is approached, see the Data Privacy page in the main navigation.