Privacy Policy

Effective date: September 24, 2026

This Privacy Policy describes how PodPilot (“PodPilot”, “we”, “us” or “our”) collects, uses, stores and shares information when you use PodPilot, including the website at https://podpilot.fun and the PodPilot service that connects authorized Google accounts with AI-powered tools and agents (together, the “Service”).

PodPilot requests access to Google services only after you explicitly authorize the requested permissions through Google’s OAuth authorization process. Google shows you the specific permissions being requested before you approve them, and PodPilot receives only the access you approve.

1. Information we collect

We collect the following categories of information:

• Information you provide directly. For example, your name and email address if you contact us, and any other information you choose to send us.
• Google account information. Basic profile information for the Google account you connect, described in Section 2.
• Google API data. Data from Google services that you explicitly authorize PodPilot to access, described in Sections 3 and 4.
• Authorization credentials. OAuth tokens issued by Google that allow PodPilot to access the services you authorized. These tokens are stored so that you do not have to re-authorize on every use.
• Technical and usage information. Information generated when the Service is used, such as timestamps, request and error logs, IP addresses and browser or client information. This information is used to operate, secure and troubleshoot the Service.

2. Google account information

When you connect a Google account, Google may provide PodPilot with basic account information such as your name, email address, profile picture and a Google account identifier, depending on the permissions you approve. We use this information to identify the connected account, associate it with your use of the Service and communicate with you about the Service.

3. Google API data

PodPilot accesses Google user data only through Google APIs and only within the scope of the permissions (“scopes”) you approve on Google’s consent screen. The specific scopes requested are displayed by Google at the time of authorization. If PodPilot needs additional access in the future, you will be asked to approve it through Google before it is granted.

Google API data is used solely to provide and improve the user-facing features of the Service that you have requested, as described in Section 5 and in the Google API Services User Data Policy disclosure in Section 10.

4. Gmail data, where authorized

If you authorize PodPilot to access your Gmail account, PodPilot may access Gmail data such as messages, threads, labels, drafts, attachments and related metadata, to the extent permitted by the specific Gmail scopes you approved. Depending on those scopes, this may include the ability to read messages, create drafts, send messages or modify labels.

Gmail data is accessed only to carry out the tasks you or an AI tool or agent authorized by you request through the Service. For example, if you ask an authorized agent to summarize recent messages or draft a reply, the relevant messages are retrieved and processed for that purpose.

Gmail data may be processed and held temporarily by the Service and by the service providers described in Section 9 in order to complete a requested task. Retention of Gmail data is described in Section 7.

We do not use Gmail data for advertising, and we do not sell Gmail data. Human review of Gmail data is limited to the circumstances described in Section 10.

5. How information is used

We use the information described above to:

• Provide, operate and maintain the Service;
• Allow AI tools and agents you have authorized to interact with your connected Google services on your behalf;
• Authenticate connected accounts and maintain your authorization;
• Respond to support requests and communicate with you about the Service;
• Monitor, secure and troubleshoot the Service, and prevent abuse;
• Comply with legal obligations and enforce our Terms of Service.

We do not use information obtained through Google APIs to serve advertisements, and we do not use it to develop, improve or train generalized artificial intelligence or machine learning models.

6. AI agents and tools acting on your behalf

PodPilot is designed to let AI-powered tools and agents that you use act on your behalf within the Google services you have connected. When you direct such a tool or agent to perform a task, PodPilot may retrieve the relevant Google data and provide it to the tool or agent, and may carry out actions in the connected service (such as creating a draft or sending a message) that the tool or agent requests within the scopes you approved.

AI tools and agents may rely on third-party AI model providers to process information. Where Google user data is provided to such a provider, it is provided only to perform the task you requested, subject to the restrictions in Section 10.

AI-generated content and actions can be inaccurate or unexpected. You are responsible for the tools and agents you choose to authorize and for reviewing the actions they take with your connected accounts. See the Terms of Service for more information.

7. Storage and retention

• Authorization credentials. OAuth tokens are stored for as long as your Google account remains connected, and are deleted or invalidated when you disconnect the account, revoke access through Google or request deletion.
• Google account information. Retained while your account remains connected and for a reasonable period afterwards for security, troubleshooting and legal purposes.
• Google API data, including Gmail data. Retained only for as long as is needed to complete the task for which it was accessed and to provide features you have requested. Some Google data may be retained for a limited period in logs, caches or task history so that the Service can operate and so that you can review what was done. We do not retain Google API data longer than is reasonably necessary for these purposes.
• Technical and usage information. Retained for a limited period for security, troubleshooting and operational purposes.

You can request deletion of your information at any time as described in Section 12.

8. Sharing of information

We do not sell your personal information or Google user data. We share information only:

• With the AI tools and agents you have authorized, to carry out the tasks you request;
• With third-party service providers that help us operate the Service, as described in Section 9;
• When required by law, regulation, legal process or an enforceable governmental request, or when we believe in good faith that disclosure is necessary to protect the rights, property or safety of users, the public or the Service;
• With your explicit direction or consent.

9. Third-party service providers

We rely on third-party providers to operate the Service. These may include cloud hosting and infrastructure providers, and AI model providers whose models are used by the tools and agents you authorize. Service providers receive only the information needed to perform their functions and are not permitted to use Google user data for any other purpose.

Google’s handling of your information is governed by Google’s own privacy policy, available at policies.google.com/privacy.

10. Google API Services User Data Policy

PodPilot’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, with respect to data obtained through Google APIs:

• We only use it to provide or improve user-facing features that are visible to you in the Service;
• We do not transfer it to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you;
• We do not use or transfer it to serve advertisements;
• We do not allow humans to read it unless we have your affirmative agreement for specific messages, it is necessary for security purposes such as investigating abuse, it is necessary to comply with applicable law, or the data has been aggregated and anonymized for internal operations;
• We do not use it to develop, improve or train generalized or non-personalized AI or machine learning models.

11. Revoking Google access

You can revoke PodPilot’s access to your Google account at any time from your Google Account permissions page at myaccount.google.com/permissions. Once access is revoked, PodPilot can no longer access your Google data, and any stored authorization tokens become invalid. You may also disconnect your account from within any tool that provides a disconnect option, or contact us to have your account disconnected.

12. Data deletion requests

You may request deletion of the information we hold about you, including Google account information, stored authorization tokens and any retained Google API data, by emailing alexk@indexstudios.fm from the email address associated with your connected account. We will process verified requests within a reasonable time and confirm when deletion is complete, except where we are required by law to retain certain information.

13. Security

We take reasonable measures designed to protect information from unauthorized access, use or disclosure, including limiting access to authorization credentials and Google user data to what is necessary to operate the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your information, we will notify you as required by applicable law.

14. Children’s privacy

The Service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and, for material changes, provide additional notice where reasonably possible. Your continued use of the Service after a change takes effect means you accept the updated policy.

16. Contact information

Questions, requests or concerns about this Privacy Policy can be sent to alexk@indexstudios.fm.