Last updated: July 31, 2026
Your account email, settings, and the content you capture (notes, forwarded emails, attachments). Content is stored in per-account private storage and search indexes scoped to your account id.
We never sell your data, never share your content with other users, and never use your content to train AI models. AI providers process your content under commercial terms that prohibit training on it.
Mail sent to your capture address is accepted only from senders you allow. Everything else is dropped.
Connecting a Google account is optional and nothing in Tobi requires it. If you connect one, we request a single scope, calendar.readonly, plus your email address to label the connection. We never request write access to your calendar and never request access to Gmail, Drive, Contacts, or any other Google service.
What we access. Events on your primary calendar within a window around today: their titles, times, locations, and attendees.
What we use it for. One purpose only: showing you your own day inside your own dashboard and morning brief, and telling you what you already know about the people you are about to meet. That is the entire use.
What we store. Your access and refresh tokens, encrypted at rest. Calendar events are read on demand and are not copied into your vault or into our search index.
What we never do. We never sell Google user data, never transfer it to third parties except the infrastructure providers needed to run the product, never use it for advertising, and never use it to train AI models.
How to remove it. Disconnect at any time from Settings. That deletes the stored tokens and revokes the grant at Google. You can also revoke access directly from your Google Account permissions page.
Tobi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We use Cloudflare for hosting, storage, and email routing, Anthropic for generating answers and briefs, and Stripe for payments. Each processes data only to provide their service, under terms that prohibit training on your content.
We keep your content while your account is active. If your subscription lapses, capture keeps working for 30 days and export stays available. On account deletion we remove your content, derived search data, settings, and any connected Google tokens.
support@tobiai.app