Legal
Privacy Policy
Alagad (“Alagad”, “we”, “us”, “our”) is an AI appointment-setting and administrative assistant for small businesses and virtual assistants, operated by PAL Tech LLC. This Privacy Policy explains what data we access — in particular data from your connected Google account — and how we use, store, share, and delete it.
1Who this policy applies to
This policy applies to customers who use Alagad and who choose to connect their own Google account so that the Alagad agent can perform appointment-setting and administrative actions on their behalf. Connecting a Google account is optional; Alagad can be used without it.
2Google user data we access
If you connect your Google account, you grant Alagad access to the following, using your own Google account and only for the features described below:
- Your email address and basic profile (
openid,userinfo.email) — to identify your account and to show you which Google account is connected. - Calendar events (
calendar.events) — to check your availability and to create and read individual calendar events when the agent books appointments on your behalf. We do not access full calendar settings, calendar sharing, or calendars you have not connected. - Contacts (
contacts) — to look up the person an appointment is being booked with (to avoid creating duplicates) and to save new prospects as contacts in your own Google account. - Spreadsheets (
spreadsheets) — to append and read rows in the specific Google Sheets you use as your bookings or leads log. We do not request Google Drive access and cannot browse, list, or open other files in your Drive.
We do not access Gmail, Google Drive file browsing, Google Photos, or any Google data beyond the specific scopes listed above. Messaging with your customers is handled by a separate system and is not covered by these Google scopes.
3Why we access it — how Google user data is used
Alagad is an AI agent that acts on your behalf, on your own connected Google account. We use Google user data solely to perform the actions you direct the Alagad agent to take:
- Checking your availability and creating, reading, and updating appointment events on your own calendar.
- Looking up an existing contact and saving new prospects as contacts in your own account.
- Appending and reading rows in the bookings or leads spreadsheet you point the agent at.
We do not use Google user data for any purpose other than providing these user-facing features to you.
4How we store and protect your data
Our design goal is to hold the minimum data needed to act on your behalf, and to encrypt the credentials we do hold. Specifically:
- Your Google refresh token is encrypted at rest. The long-lived refresh token that lets the agent act on your behalf is encrypted before it is stored, and is held only in your own workspace’s records on our platform. It is decrypted transiently only when an action needs to obtain a fresh access token.
- Access tokens are short-lived. Short-lived Google access tokens are used for individual API calls and expire automatically. Where a short-lived access token is cached to avoid repeated re-authentication, it is stored encrypted and is replaced when it expires.
- We store limited account metadata. Alongside the encrypted credential we store non-content metadata: the email address of the connected Google account, the set of permissions (scopes) you granted, and the date the account was connected. This lets us show you which account is connected and route actions correctly.
- We do not maintain a central store of your Google content. Your calendar events, contact records, and spreadsheet rows are retrieved from Google, used to perform the action you requested, and are not warehoused in a central credential store.
- Tenant isolation. Each customer’s connected account and data are isolated from other customers; one customer cannot access another customer’s connected Google account or data.
Alagad is a conversational AI agent. When the agent retrieves Google content to act on your instructions — for example an event title, a contact’s name and phone number, or a row from your sheet — that content is processed within the agent’s conversation. To provide continuity across a conversation, the agent may retain such content in its conversation history and memory. This retained content is part of your own workspace’s agent and is subject to the deletion process in Section 6.
5What we do NOT do with your data
- We do not sell your Google user data.
- We do not transfer your Google user data to third parties, except the infrastructure and AI providers strictly necessary to operate your agent on your behalf, or where required by law.
- We do not use your Google user data for advertising.
- We do not use your Google user data to train, develop, or improve generalized AI/ML models.
- We do not allow humans to read your Google user data except (a) with your consent, (b) for security or to comply with applicable law, or (c) where the data has been aggregated and anonymized for internal operations.
6Data retention, disconnecting, and deletion
We retain your stored Google credentials only while your Google account remains connected to Alagad. You can stop Alagad’s access at any time, in either of two ways:
- Disconnect within Alagad — use the Disconnect / Connections control in your Alagad portal. This deletes the stored refresh token (and any cached access token) from our systems.
- Revoke at Google — remove Alagad’s access from your Google Account permissions page at myaccount.google.com/permissions. This immediately invalidates the credential.
Disconnecting or revoking immediately stops further access to your Google account. To request deletion of remaining workspace data, including content retained in the agent’s conversation memory, email [email protected] and we will delete it, subject to any retention required by law.
7Google API Services Limited Use disclosure
Alagad’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
8Children’s data
Alagad is a tool for businesses and is not directed to children. We do not knowingly collect personal information from children.
9Changes to this policy
We may update this policy from time to time. When we do, we will post the updated version at this URL with a new effective date.
10Contact
Questions about this policy or your data: [email protected], PAL Tech LLC.