Privacy Policy

Information We Collect

When you create an account, we collect your email address and name. If you set a password, we store it as a secure bcrypt hash — we never store your actual password.

If you sign in with Google or link your Slack, Discord, or LINE account, we receive limited profile information (such as your display name and profile picture URL) from those providers. We also store OAuth tokens necessary to maintain the connection. When you interact with the D6E bot on Slack, Discord, or LINE, we temporarily access recent message history to provide conversation context to the AI agent. For LINE, message history is stored for up to 24 hours due to API limitations.

We use cookies for session management, OAuth state verification (CSRF protection), and language preference. These are essential cookies required for the service to function and are not used for tracking.

Google Workspace Data

When you connect Google Workspace to a D6E workspace, D6E may access the categories of Google user data covered by the permissions you approve: Gmail message headers and content for search and reading; Gmail send permission for user-confirmed messages; Google Drive file and folder metadata for user-requested listings and the folders or shared drives you select in Drive Sync, file content for user-requested reads, and user-requested uploads or metadata updates; Google Sheets spreadsheet metadata, cell values, and user-requested writes; and Google Calendar events on your primary calendar. D6E accesses this data only after you connect the account and only when you or an authorized workspace member requests the related feature. It does not access Gmail labels or settings, Drive permissions or sharing, or non-primary calendars through the supported integration.

Google Workspace data is used only to provide or improve the user-facing D6E feature that the user requested. It is not sold, used for advertising, profiling, credit decisions, or any unrelated secondary purpose, and it is never used to develop, improve, fine-tune, or train generalized or foundation AI/ML models. When a workspace uses a cloud AI provider, only the content needed to generate the user's requested response is transmitted to the selected provider. D6E does not retain Google data for model training. Workspace-specific prompts, rules, responses, and derived data remain scoped to that workspace and are not shared with other organizations.

Use of raw or derived user data obtained from Google Workspace APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. D6E does not transfer, sell, or make Google Workspace data available to a third party for advertising, profiling, resale, or generalized or foundation model training. A provider receives Google data only after the user requests the related D6E feature and only for that feature's output; no provider may use the data for a secondary purpose.

AI service providers and processing choices

D6E's production cloud requests use a commercial Vercel AI Gateway account and centrally managed API access. The available provider APIs and service tiers are: OpenAI API — commercial API/business access (not ChatGPT Free, Plus, or Pro); Anthropic API — commercial API/business access (not a Claude consumer subscription); Google Gemini API — commercial API/business access (not a consumer Gemini subscription); xAI API — commercial API/business access; and Meta-hosted models — commercial hosted API access through the gateway. Users do not connect personal provider accounts, and the D6E workspace subscription/entitlement controls which models are available. Google Workspace data is sent to a selected cloud provider only to generate a user-requested response, and D6E does not authorize or use that data for provider training, advertising, profiling, resale, or any other secondary purpose. Optional self-hosted Ollama and LM Studio endpoints are operator-hosted/local choices; when selected, Google data is processed at that endpoint and is not sent to a provider API for training or secondary purposes.

How We Use Your Information

We use your information solely for authentication, account management, and providing the D6E service. We do not use your data for advertising, profiling, or any purpose unrelated to the service.

Data Sharing

We do not sell, rent, or share your personal information with third parties for advertising, profiling, or model training. Your Google Workspace data is transferred only to the connected Google APIs and, when the workspace has configured a cloud AI provider, to that provider solely to provide the user-requested feature. These transfers occur after the user authorizes the connection and are not used for any unrelated purpose.

Data Security

We implement industry-standard security measures to protect your data. Passwords are hashed using bcrypt, OAuth credentials are encrypted at rest on the server, authentication tokens are signed with RS256 (asymmetric cryptography), and all communication is encrypted via HTTPS.

Data Retention

We retain your account data as long as your account is active. Session data expires automatically. Google OAuth credentials remain encrypted while the connection is active and are removed when the connection is disconnected. Google Workspace responses may remain in the connected workspace's chat/task history, and selected Drive files may remain in the Drive Sync cache, according to that workspace's retention controls. LINE message history used for conversation context is automatically deleted after 24 hours. You may disconnect an integration, remove a Drive Sync root, or request deletion of your account and associated data at any time by contacting us.

Your Rights

You have the right to access, correct, or delete your personal data. You can manage your profile and connected accounts from your account settings page, or contact us for further assistance.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or your personal data, please visit our support page. Support