Privacy policy

Information we access

Google connections are optional and use the permissions you grant. Depending on the connection and features you use, Shokai processes:

• Your Google account identifier, name, email address and profile information for sign-in and account association.
• Gmail messages, headers, participants, labels, attachments and drafts needed for connected communication workflows.
• Calendar lists, event titles, descriptions, attendees, locations, meeting links, responses and availability from connected calendars.
• Google Drive file content and metadata for files you select or that Shokai creates. The Drive connection uses file-specific access.
• Workspace records, uploaded content, operational logs and audit records, plus OAuth tokens needed to maintain your connections.

How we use information

We use this information to authenticate users, synchronize connected accounts, organize business conversations and contacts, identify and categorize meetings, calculate availability, manage documents, and carry out authorized workspace actions. Connected workflows may run in the background. Granted permissions can also support creating drafts, sending messages, changing labels and updating calendar events when those actions are authorized.

Automated processing and sharing

Shokai uses service providers to host and process data. These include Google Cloud and Google Workspace, and AI services such as Google Gemini and TypeSafe for enabled assistant, extraction and classification features. Relevant message, event, document and workspace context may be sent to those services to perform the requested feature. AI output can be incorrect and can be reviewed in the workspace.

Authorized workspace members may see shared work records. Calendar-sharing settings control which event details are shared; private events can appear as busy time. Documents or booking information are shared with recipients when an authorized user enables that sharing. We do not sell Google user data or use it for advertising. Shokai does not use Google user data to train general-purpose AI models.

Shokai’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Google data is used for the user-facing features described here. Human access is limited to authorized sharing, support with consent, security investigations, or legal obligations.

Storage and security

Shokai stores synchronized records, derived workspace records and audit history in its application database. OAuth credentials are encrypted in the application credential store. HTTPS protects data in transit, and authenticated access and workspace permissions restrict access to application data. Infrastructure and AI providers may process data in different countries under their applicable service arrangements.

Retention, disconnection and deletion

Disconnecting an account stops its future synchronization; it does not automatically erase records already copied into the workspace, shared documents, audit history or backups. Records remain until removed through available workspace controls or an administrator handles a deletion request. Security and audit records, backups and records required by law may be retained separately.

You can remove Shokai’s authorization in your Google Account connections. To request access, correction, export or deletion of stored data, email feras@firstspring.ai from the connected account, identifying the account and records concerned. We may need to verify your identity and distinguish your personal data from shared business records.

Cookies and changes

Shokai uses session cookies and browser storage for authentication, access control and interface preferences. This notice may be updated as the service changes. New uses of Google data that require additional consent will be disclosed before that data is used for the new purpose.