Privacy Policy
Last updated: May 19, 2026
ALL mind is an invite-only AI email assistant operated by A-LL Creative Technology. This policy explains how ALL mind handles personal data and Google user data for its current Gmail assistant beta.
What ALL mind does
ALL mind connects to Gmail only after a user gives explicit Google OAuth consent. The service reads Gmail messages and threads to understand mailbox context, tone, relationships, and whether a reply is useful, then creates Gmail draft replies for human review.
Google user data accessed
For the current Google verification wave, ALL mind requests only these Google OAuth scopes:
- https://www.googleapis.com/auth/gmail.readonly to read Gmail messages and threads needed for context analysis, profile insights, inbox triage, follow-up detection, and draft preparation.
- https://www.googleapis.com/auth/gmail.compose to create Gmail drafts that the user can review, edit, send, or discard manually.
ALL mind does not request the Gmail send scope. Google Drive is disabled for the current verification wave. ALL mind does not request Google Drive access, does not read Drive files, and does not move or modify Google Drive files for this wave.
Purpose limitation
Google user data is used only to provide user-facing ALL mind Gmail features: building communication profile insights from email history, understanding whether a reply or follow-up may be useful, and creating draft replies in Gmail for manual review.
What ALL mind does not do
- ALL mind creates Gmail drafts only. It never sends emails automatically.
- ALL mind never deletes emails.
- ALL mind never archives emails.
- ALL mind never marks emails as read.
- ALL mind does not modify Gmail labels.
- ALL mind does not sell Google user data.
- ALL mind does not use Google user data for advertising, retargeting, or unrelated profiling.
- ALL mind does not use Google user data to train general-purpose AI models.
Data storage and retention
Gmail remains the source of truth for raw email content. ALL mind stores lightweight references, statuses, fingerprints, snippets, short summaries, decisions, profile insights, snapshots, draft metadata, and audit logs. Full email bodies and attachments are not stored permanently by default.
Temporary manual profile exports are retained only for a limited configured period and are automatically cleaned up. Google OAuth tokens are encrypted at rest and are not exposed in admin screens, logs, API responses, or documentation.
Sharing and processors
ALL mind may send limited email context to configured AI providers to create user-facing profile insights or draft text. This processing is limited to the user-requested ALL mind functionality. ALL mind does not transfer Google user data to third parties for advertising or resale.
Security
Access to Gmail data is routed through controlled backend services. Tenant boundaries, encrypted token storage, audit logs, restricted admin views, and review states are used to reduce unnecessary exposure.
User revocation and data deletion
Users can revoke ALL mind's Google access from their Google Account permissions page at any time. Users can also request deletion of connected account tokens, profile data, temporary exports, draft metadata, and related records by contacting support.
Google API Services User Data Policy
ALL mind's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Contact
For privacy, support, or data deletion requests, contact support@a-ll.tech.