1. Google API Services User Data Policy Compliance
Our Application complies with the Google API Services User Data Policy, including the Limited Use requirements. We understand the importance of protecting user data and have implemented measures to ensure compliance with the policy. We only use user data for the purposes outlined in our privacy policy and do not share or sell user data to third parties. By using our application, you acknowledge and agree to our compliance with Google API Services User Data Policy.
Message One's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Integrated Google Services & Scopes
Google Sheets
Purpose: We allow you to get data from and update your Spreadsheets.
When you connect your Google account to Message One for spreadsheet automation:
- We request read and write access strictly to the specific spreadsheets you explicitly authorize in your flow builder actions.
- We use this access to append incoming customer leads, record order inquiries, and read lookup tables to provide dynamic replies in automated conversations.
- We do not inspect, read, or index any spreadsheets outside the specific IDs chosen in your workflow nodes.
Personal Data processed: Spreadsheet data configured by the user; OAuth tokens.
Place of processing: United States / Cloud Infrastructure – Google Privacy Policy.
Google Calendar
Purpose: We read the list of your calendar events to avoid overbooking. In addition, we add events to your Calendar when customers book appointments.
When you connect Google Calendar to enable meeting and appointment scheduling:
- We read calendar free/busy availability to prevent double-booking when your automated assistants or flow steps propose meeting slots to customers.
- We create new calendar events when an appointment or consultation is confirmed by a customer during a conversation.
- We do not access, read, or store personal details or descriptions from unrelated calendar events on your agenda.
Personal Data processed: Calendar free/busy availability; booked event timestamps and attendee emails.
Place of processing: United States / Cloud Infrastructure – Google Privacy Policy.
Dialogflow
Purpose: We use Dialogflow to allow you to automate customer services with Dialogflow. We only use Dialogflow to detect user intent.
When you connect Dialogflow:
- We send inbound customer messages to your configured Dialogflow agent solely to identify intents and extract entities for flow routing.
- Customer queries are processed in real time and are not used for any other purpose beyond matching user intents for your chatbot flows.
Personal Data processed: Inbound message text communicated while using the service; intent classifications.
Place of processing: United States – Google Privacy Policy.
Prohibition on General AI / ML Model Training
Message One affirms that we do not use Google Workspace or Google API data to develop, train, fine-tune, or improve generalized or non-personalized artificial intelligence (AI) or machine learning (ML) models.
All conversational completions rely on zero-data-retention application logic that processes your context exclusively for that single request. Your data is never shared with model providers for foundation model training or public evaluation.
Data Retention, Security & Revocation
Encryption at Rest & in Transit: OAuth access tokens and refresh tokens for Google APIs are encrypted at rest using AES-256 and transmitted exclusively over HTTPS/TLS 1.3.
Zero Data Selling: We do not sell, rent, or transfer Google user data to third parties for advertising or commercial brokerage under any circumstances.
How to Revoke Access: You can disconnect and revoke Message One's access to your Google account at any time either from your Message One Workspace Settings or directly via your Google Security Settings (Third-party apps with account access). Upon revocation, stored authentication tokens are permanently deleted from our servers.