Privacy Policy

Last updated: October 2026

ALL mind is an invite-only workspace operated by A-LL Creative Technology. This policy describes its Gmail assistant and company marketing features when enabled.

What the Gmail assistant does

ALL mind connects to Gmail only after a user gives explicit Google OAuth consent. The service reads Gmail messages and threads to understand mailbox context, tone, relationships, and whether a reply is useful, then creates Gmail draft replies for human review.

Google user data accessed

For the current Google verification wave, ALL mind requests only these Google OAuth scopes:

  • https://www.googleapis.com/auth/gmail.readonly to read Gmail messages and threads needed for context analysis, profile insights, inbox triage, follow-up detection, and draft preparation.
  • https://www.googleapis.com/auth/gmail.compose to create Gmail drafts that the user can review, edit, send, or discard manually.

ALL mind does not request the Gmail send scope. Google Drive is disabled for the current verification wave. ALL mind does not request Google Drive access, does not read Drive files, and does not move or modify Google Drive files for this wave.

Purpose limitation

Google user data is used only to provide user-facing ALL mind Gmail features: building communication profile insights from email history, understanding whether a reply or follow-up may be useful, and creating draft replies in Gmail for manual review.

What ALL mind does not do

  • ALL mind creates Gmail drafts only. It never sends emails automatically.
  • ALL mind never deletes emails.
  • ALL mind never archives emails.
  • ALL mind never marks emails as read.
  • ALL mind does not modify Gmail labels.
  • ALL mind does not sell Google user data.
  • ALL mind does not use Google user data for advertising, retargeting, or unrelated profiling.
  • ALL mind does not use Google user data to train general-purpose AI models.

Data storage and retention

Gmail remains the source of truth for raw email content. ALL mind stores lightweight references, statuses, fingerprints, snippets, short summaries, decisions, profile insights, snapshots, draft metadata, and audit logs. Full email bodies and attachments are not stored permanently by default.

Temporary manual profile exports are retained only for a limited configured period and are automatically cleaned up. Google OAuth tokens are encrypted at rest and are not exposed in admin screens, logs, API responses, or documentation.

Sharing and processors

ALL mind may send limited email context to configured AI providers to create user-facing profile insights or draft text. This processing is limited to the user-requested ALL mind functionality. ALL mind does not transfer Google user data to third parties for advertising or resale.

Security

Access to Gmail data is routed through controlled backend services. Tenant boundaries, encrypted token storage, audit logs, restricted admin views, and review states are used to reduce unnecessary exposure.

User revocation and data deletion

Users can revoke ALL mind's Google access from their Google Account permissions page at any time. Users can also request deletion of connected account tokens, profile data, temporary exports, draft metadata, and related records by contacting support.

Google API Services User Data Policy

ALL mind's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Company marketing and Instagram

When a company enables the Markom specialist, ALL mind handles its marketing settings, brand media, templates, drafts, approvals, schedules and publication history within that company workspace. News, product advertising and website-inspired content are separately configured. Company business systems remain the source of product details and availability.

An authorized company user can connect a professional Instagram account when this connection is available for the company. ALL mind requests instagram_business_basic and instagram_business_content_publish for account identity and approved content publication. It stores the account identity, granted permissions, token expiry and encrypted access credentials. Marketing preparation may use the AI providers configured for the company.

A connection alone does not authorize a post. Publication uses the company’s approved content or approved recurring rule and the enabled publishing service. Meta receives the approved media and publication requests. The final image may be made available to Meta through a temporary signed URL.

Disconnecting the account in ALL mind clears its local access credentials and cancels pending reconnect attempts. Account, approval and publication history are retained. Disconnecting in ALL mind does not itself remove the application from the account’s Meta settings. For deletion of retained marketing data, contact support@a-ll.tech.

Contact

For privacy, support, or data deletion requests, contact support@a-ll.tech.

Contact us