Information we collect

Account and workspace information you provide (name, work email, company); OAuth connection metadata for the mailboxes, calendars, and file stores you connect; the mail those connections synchronize (headers, bodies, and attachment metadata) to the extent needed for the features you enable; calendar and file metadata where you turn those features on (event titles, times, attendees, and file names and links; we do not copy file contents); configuration such as rules, agent keys, ceilings, sending policies, and automatic-reply settings; product usage, device, and security logs, including IP addresses; support communications; and billing status from Stripe. We never see or store your card number.

When you switch on background replies or automatic replies for a mailbox, the Service also reads messages you previously sent from that mailbox, to learn how you write and whom you correspond with, as described below.

How we use information

To provide, secure, and support the Service: synchronize enabled mailboxes, sort and summarize email, and prepare drafts for your review. For a mailbox where you switch it on, the Service also prepares a reply in the background when someone is waiting on you; a few of your own previously sent messages are used, at the moment a reply is prepared, as examples of your writing style. This does not train any AI model.

Automatic replies are off by default. Only where you switch them on for a mailbox and accept their terms, a prepared reply may be sent for you without your review of that message, within the limits described in the Terms of Service: to people you have corresponded with, after a second automated check, held briefly with the option to undo, capped per day, and recorded on your ledger. A report of each such send, with its recipients, a short summary, and the full text, is written into your own mailbox. You can switch automatic replies off at any time.

We also use information to run the rules you set, hold outbound mail for the undo window, prevent fraud and abuse, maintain and improve the reliability and performance of the Service, communicate with you about your account, and meet legal obligations. We do not sell personal information and do not share it for cross-context behavioral advertising.

The web app and the iOS app

emlOPS runs as a web application at app.emlops.com and as a native iOS app for the same workspace. Signing in does not by itself grant access to a mailbox: the app checks your workspace entitlement on our servers and fails closed if it is not active. On iOS you may use Sign in with Apple; Apple then gives us the account identifier and the email address you choose to share, which may be Apple's private relay address, and nothing else. Neither app holds a provider secret, a billing secret, or an AI key. Mail is displayed with scripting disabled and remote images off unless you ask for them, and an attachment is fetched from your provider only when you open it.

Google API Services User Data Policy and Limited Use

emlOPS use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide and improve user-facing features of emlOPS. It is not used for advertising, is not transferred to third parties except to provide those features or as required by law, is not read by humans except with your consent, for security, or to comply with the law, and is not used to train generalized artificial intelligence or machine learning models.

AI providers

When an AI feature runs, the minimum necessary context (typically one conversation or one message, and for drafting a few of your own sent messages as style examples) is sent to the selected model provider. Managed emlOPS AI uses the providers listed under Subprocessors. If you bring your own provider, your key is sent with each request and never stored. Provider API terms prohibit training on this data, and we do not train models on your mail. AI output can be wrong; see the Terms of Service.

The agent dock

If you issue an agent key, the agent you connect can read what emlOPS has organised, within the per-mailbox ceiling you set, and can propose drafts into your approval queue. An agent cannot send mail unless you approve a sending policy for that key and that mailbox: the policy names who may be written to, a daily limit, and a hold you can cancel within, and a release still passes the outbound checks and lands on your ledger. A key without an approved policy is not offered the send tools at all, and you can revoke a policy at any time. Every agent call is written to your ledger with the key's label. Webhooks you register receive signed event notifications (what changed, never full message bodies) at the URL you choose; you are responsible for that endpoint and for the agents you connect.

Information about other people

The mail you connect contains information about the people you correspond with. We process it on your behalf, to provide the Service to you. You are responsible for having the right to connect that mail and for any notice or consent those people are owed under the laws that apply to you.

Sharing

We share information only with the subprocessors below, with the providers you connect, with professional advisers under confidentiality, when we believe it is required by law or legal process, to protect the rights, property, or safety of EVKii, our users, or others, and in connection with a merger, financing, acquisition, or sale of assets, subject to this policy.

Subprocessors: Supabase (database, authentication, storage, and serverless functions; United States); Vercel (web application and marketing site hosting; United States); Cloudflare (edge security and content delivery); Stripe (billing and payments; sees your billing details, never your mail); OpenAI (managed AI classification, summaries, drafts, and the self-check on automatic replies; the minimum context for the request, under API terms that prohibit training on it); Composio (connections to applications you link, including any Outlook mailbox you connect through Composio and the app actions you run from a conversation; United States); The mail provider you connect (Google and Microsoft today, others as they are enabled), which stores your mailbox and receives the actions you approve or switch on. We give at least thirty days' notice on this page before adding a subprocessor that handles mail content.

Third-party services

The providers and applications you connect, and any site you reach through a link in the Service, are governed by their own terms and privacy policies. We do not control them and are not responsible for their content, practices, or security.

Retention and deletion

We retain information only as long as reasonably necessary to operate, secure, and support the Service and to meet legal obligations. Disconnecting a mailbox stops synchronization immediately and destroys its stored provider credential; its synchronized mail is removed from emlOPS.

You can export your data at any time from Settings as a JSON file: profile, mailboxes, conversations with their lanes and summaries, message headers and snippets, drafts, rules, snippets, keys, webhooks, and your ledger. Message bodies stay in your mailbox at the provider. emlOPS is not a backup service; keep your own copies of anything you need.

Requesting account deletion pauses synchronization immediately. Seven days later, unless you cancel, your profile, mailboxes, messages, drafts, rules, agent keys, webhooks, and ledger are permanently deleted, and a workspace where you were the only member is deleted with them. A workspace with an active subscription must cancel billing first. Backups age out within thirty days.

Security

We use administrative, technical, and organizational safeguards designed to protect information: encrypted provider credentials, tenant-scoped authorization enforced in the database, an audit ledger of every consequential action including agent calls and automatic sends, outbound mail held before release, least-privilege server access with multi-factor authentication for staff, and encryption in transit and at rest.

No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of your information. You are responsible for keeping your credentials confidential and for the security of your own devices and connected accounts. If we become aware of a security incident affecting your personal information, we will notify you as the law requires.

International transfers

We process data in the United States. Where the GDPR or UK GDPR applies to personal data you connect, we rely on the Standard Contractual Clauses and the UK Addendum through our Data Processing Addendum, available at /dpa.

Your rights and choices

You may access, correct, export, or delete your information, disconnect any provider, switch off background or automatic replies, revoke any agent key or sending policy, and object to or restrict processing where the law provides. Self-service export and deletion are in Settings; for anything else, email us and we respond within the time the law allows. We may need to verify your identity before acting on a request.

Automated decisions: emlOPS decides without human review which drafts qualify to send only where you switch on automatic replies. You can switch them off at any time, and every such send is on your ledger and reported to your inbox.

California privacy disclosures

In the past twelve months we have collected these categories of personal information: identifiers (name, email address, account identifiers, IP address); customer records (billing status and contact details); commercial information (plan and subscription history); internet or other electronic network activity (usage and security logs); and sensitive personal information limited to account log-in credentials (stored encrypted) and the contents of the mail you connect, which we use only to provide the Service you request. We collect it from you, from the providers you connect, from your correspondents through your mail, and from Stripe, for the purposes described above, and we disclose it for those business purposes to the service providers listed under Subprocessors.

We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act, we do not use sensitive personal information for purposes that would give rise to a right to limit it, and we do not knowingly sell or share the personal information of anyone under 16. California residents may request to know, access, correct, and delete their personal information and may designate an authorized agent; we will not discriminate against anyone for exercising these rights. Send requests to info@emlops.com.

Our site and apps do not track you across third-party websites, so they do not respond to Do Not Track signals.

Marketing email

If you request workspace access, we email you about activation and the launch. Every such email says how to stop; replying STOP or emailing us ends it. Service emails about your account, security, and billing are sent regardless.

Children

The Service is for businesses and professionals aged 18 and older and is not directed to anyone under 16. We do not knowingly collect personal information from children; if you believe a child has provided us information, contact us and we will delete it.

Changes

We will post changes here with a new date and, for material changes, notify account holders by email or in the Service at least fourteen days before they take effect.

Contact

Privacy inquiries: info@emlops.com. EVKii, Inc., 7040 Avenida Encinas #104-441, Carlsbad, CA 92011.