1. Scope

This Privacy Policy explains how Bogi ("we", "our", or "us") handles personal information when you use our websites, AI assistant, workspaces, connected services, and related features (the "Service").

2. Information We Collect and Why

Account and billing information, such as your name, email, profile image, workspace membership, subscription, and transaction details, to administer your account and purchases. Payment card information is handled by our payment providers.
Content, such as prompts, conversations, files, images, audio, instructions, AI responses, and workspace artifacts, to provide the features you request.
Connected-service information, including authorization credentials, account identifiers, and data Bogi reads or changes when you use a connector.
Usage and device information, such as your IP address, browser, device, pages viewed, feature interactions, cookies, referral information, and ad click identifiers, to operate, secure, analyze, and improve the Service and measure marketing.
Communications you send us for support, feedback, or other requests.

3. Connected Services and Google User Data

If you connect a third-party service, Bogi may access and modify data within the permissions you grant and as needed to complete your requests. Some connections are operated through integration providers, including Composio, which may process the data needed to authenticate the connection and run requested actions.

For Google services, the information and actions may include:

Google Sign-In: your name, email, profile image, and Google account identifier.
Gmail: messages, headers, attachments, labels, and message status, including messages Bogi sends or modifies at your request.
Google Calendar: calendars and event details, including events Bogi creates, updates, or deletes at your request.
Google Drive: file, folder, content, structure, and permission data needed to find, read, create, organize, share, or delete files at your request.
Google Sheets: spreadsheet metadata, structure, formulas, and values needed to read, create, copy, format, or update spreadsheets at your request.
Google Ads: account, campaign, ad, keyword, search-term, audience, performance, conversion, and reporting data needed to analyze or manage your advertising at your request.

We use Google user data only to provide user-facing connector features. Relevant data may be sent to an AI provider to complete your request. We store encrypted authorization credentials and may store account settings and identifiers. Outputs, summaries, excerpts, or files may remain in your Bogi conversations or workspace.

You can stop future access by disconnecting the connector in Bogi or revoking access in your Google Account. Disconnecting deletes the stored Bogi connection but does not automatically delete content already saved in Bogi. You can delete that content where controls are available or request deletion by contacting us.

We do not sell Google user data or use it for advertising, credit-worthiness, lending, or training general-purpose AI models. Bogi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. AI Processing

Bogi sends your prompts and relevant conversation, file, workspace, or connector context to an AI provider. Depending on the feature, availability, and model you select, this may include Microsoft Azure OpenAI, OpenAI, Google, OpenRouter, and the model provider fulfilling an OpenRouter request.

We do not use your content to train our own AI models or opt in to third-party training without your explicit consent. AI providers may temporarily retain or review data for safety, abuse prevention, or legal compliance under their business-service terms and our configured data controls.

5. Analytics, Cookies, and Session Replay

We use cookies and local storage for authentication, preferences, analytics, and campaign attribution. We use PostHog and Axiom to understand usage, operate the Service, and diagnose failures. This may include account or workspace identifiers, feature events, device and network information, diagnostic metadata, and limited content needed to investigate a problem.

In production, session replay may record text displayed on a page and text entered into some fields. We mask common sensitive input types and pause recording during staff impersonation.

We collect campaign parameters and Google or LinkedIn ad click identifiers to attribute signups and measure conversions. We do not use data obtained through a Google connector for this purpose. You can control cookies through your browser, but blocking some cookies may prevent parts of the Service from working.

6. How We Share Information

We share information only as needed with providers that support AI processing, hosting and storage, connectors, analytics, observability, email, support, payments, and subscriptions; with connected services when you request an action; when required by law or reasonably necessary to protect the Service and its users; or when you direct us to share it. These providers may process information in countries where privacy laws differ from those where you live.

We do not sell personal information or transfer connected-service data to third parties for their independent use. We do not use the contents of your conversations, files, or workspace to build advertising profiles or target advertising.

Bogi team members do not access your conversations, files, workspace content, or connected-service data unless you explicitly authorize access for support, or access is necessary to investigate abuse or a security incident, or comply with law.

7. Retention, Security, and Your Rights

We retain account information, conversations, workspace content, and related data while your account or workspace is active and as needed to provide the Service. Some information may remain for a limited period in backups, security or billing records, and logs, or where required by law. Third-party providers apply their own retention terms.

We use safeguards designed to protect personal information, including encryption in transit and encryption of stored connector credentials. No transmission or storage method is completely secure.

Depending on your location, you may have rights to access, correct, delete, restrict, object to the processing of, or receive a portable copy of your personal information. You may also withdraw consent where applicable. Contact us to submit a request; we may need to verify your identity and authority.

8. Changes and Contact

We may update this policy by posting the revised version and changing the "Last updated" date. If we materially change how we use Google user data, we will provide notice and obtain consent where required before using it for the new purpose.

For privacy questions or requests, contact hello@usebogi.com.

Privacy Policy