Privacy Policy

1. Who we are

Nectry, Inc. ("Nectry," "we," "us," or "our") lets you describe, in plain language, tools that work with your data in services such as Gmail and Google Calendar, then builds and hosts those tools and makes them available to an AI assistant you choose. This policy describes the information we handle through our website and the Service, and is part of our Terms of Service.

2. Information we handle

• Account information: the name, email address, and profile picture Google provides when you sign in, and anything you send us when you contact support.
• Contact form information: the name, email address, company, job title, and message you submit through our contact form, which we store in Google Sheets and use only to reply to you.
• Connected-service information: the authorization tokens Google or another service issues to Nectry, the identity of the connected account, and the content or records your tools read or write, such as email messages, calendar events, files, and spreadsheet cells.
• Tool and conversation information: the descriptions you write, the tools Nectry builds from them, your conversation history with Nectry's creation agent (including a record of the tool calls it made and their results), and the data your tools store.
• Technical information: server logs recording requests to the Service, their time, and the network address they came from, used to operate and protect the Service.

Our public website uses Google Analytics, which sets cookies and collects usage information like pages viewed, approximate location, and device type. Google's own privacy policy governs its use of that data. The Service itself sets only the cookies needed to keep you signed in, and no analytics tags run there.

3. Google services and permissions

When you connect your Google account, Google asks you to authorize specific permissions. Nectry requests only the permissions the tools you set up need, and accesses your Google data only when you or your assistant invoke one of those tools. The permissions Nectry may request are:

• Gmail: read messages, labels, and settings; create drafts and send messages; apply and remove labels; change basic settings such as filters and signatures. Nectry never deletes messages permanently.
• Google Calendar: read calendars and events; create, update, and delete events.
• Google Drive: read file metadata and contents. Nectry does not write to Drive.
• Google Sheets: read and edit spreadsheet contents.
• Basic profile: your email address, name, and profile picture, to sign you in.

A given tool uses only the subset of these that it needs, and Google shows you the exact list when you consent.

Nectry's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

4. How we use information

We use information to sign you in, build and run the tools you request, maintain connections to the services you authorize, show you your conversation and tool history, respond to support requests, and protect the Service against misuse.

Google user data is used only to provide or improve the user-facing features you authorize. We do not sell Google user data, use it for advertising, or use it to determine creditworthiness. We do not use Google user data to train generalized artificial-intelligence or machine-learning models, and we do not permit any provider we use to do so.

5. AI assistants and data sharing

Your assistant. You choose the AI assistant that uses your Nectry tools. When that assistant calls a tool, the tool's results are returned to it, and those results may contain Google data or information from other connected accounts. The assistant provider's handling of that information depends on its terms and your settings with it. Review those before connecting.

Nectry's creation agent. When you describe or refine a tool, Nectry sends your description, your conversation history, and any data the agent needs to build or test the tool to a third-party model provider. Nectry currently uses Anthropic and may use a different provider at any time. Each provider processes this data only to generate a response for you and is contractually prohibited from training models on it or retaining it beyond what is needed to provide the service to us.

Infrastructure providers. Nectry runs on Google Cloud Platform. Cloud providers store and transmit data on our behalf under their own security commitments and cannot use it for their own purposes.

Beyond the above, Google user data is transferred only as Google's Limited Use requirements permit: with your consent, for security purposes, to comply with law, or as part of a merger or acquisition with explicit prior notice to you.

6. Human access and security

Nectry staff do not read your Google data or tool data except when you ask us to for support, when needed to investigate a security incident or abuse, or when required by law. Access to production systems is limited to the engineers who operate them.

All connections to the Service and to connected services use TLS. Authorization tokens and your data are stored in access-controlled databases with regular backups. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.

7. Retention and deletion

• Authorization tokens for connected services are refreshed while you use the Service. They are deleted when you disconnect the service, when the service revokes them, or automatically within 14 days after they expire unused.
• Sign-in credentials for your Nectry account are deleted after 30 days without activity; you can sign in again with Google at any time.
• Tool definitions, tool data, and conversation history are kept for as long as your account exists, so your tools keep working and you can see what they did. Data your tools store may include copies of Google data, such as messages a tool synced.
• Server logs are kept for up to 30 days.
• Backups of our databases are kept for 30 days, after which deleted data is gone from them as well.

To delete your account and all of the above, email support@nectry.com from the address associated with your account. We complete deletion within 30 days, except for records we must keep to comply with law or resolve disputes, which we delete when that need ends. Revoking a connection in Google stops future access but does not by itself delete data already stored in your tools. Copies held by your assistant's provider must be requested from that provider.

8. Your choices

You can disconnect a service inside Nectry, and you can review and revoke Nectry's Google access at any time through your Google Account's third-party connections.

You may request a copy of your information, correction of inaccurate information, or deletion of your account by emailing support@nectry.com. We may need to verify that the request comes from the account holder.

9. Changes to this policy

We will update the effective date when this policy changes and notify you by email or within the Service for material changes. If we propose a new use of Google user data, we will update these disclosures and obtain any required consent before starting that use.

10. Contact

Nectry, Inc.
1070 Broadway
Somerville, MA 02144
support@nectry.com for privacy questions and deletion requests
legal@nectry.com for legal notices