Privacy Policy

1. Information we collect

The information we collect depends on how you use PeakAgent. It may include:

• Account and contact information, such as your name, business name, email address, phone number, assessment responses, and support communications.
• Business configuration information, including your workflows, operating rules, assistant instructions, preferences, voice, and approval settings.
• Content you provide or authorize, such as messages, files, documents, business records, CRM records, and assistant work product.
• Connected-account information, including email and calendar metadata or content, contacts, documents, and records from tools you choose to connect.
• Messaging information, including SMS, WhatsApp, Slack, Telegram, or Discord messages where enabled, phone numbers, message status, and carrier or delivery metadata.
• Usage and security information, such as device, browser, interaction, diagnostic, authentication, and security-log data.

2. How we use information

We use information to configure and operate your assistant, complete the workflows you request, maintain business memory and preferences, provide support, communicate with you, prevent fraud or abuse, troubleshoot and secure the service, comply with law, and improve the reliability of PeakAgent's user-facing features.

3. Connected tools, permissions, and actions

You choose whether to connect email, calendar, CRM, documents, messaging, automation, accounting, advertising, collaboration, or other business systems. PeakAgent uses a connection only to provide the features and workflows you authorize.

Depending on the permission and workflow you select, your assistant may read, search, summarize, draft, send, schedule, label, archive, create or update records, trigger workflows, or generate documents. Sensitive, external-impact, or irreversible actions can be configured to wait for your approval. You are responsible for choosing suitable permissions and for the people and accounts you authorize.

4. Google Workspace and Google API data

If you connect a Google account, the Google authorization screen shows the categories of permissions requested for the features you choose. Depending on your configuration, those features may use Gmail, Google Calendar, Google Drive, or other Google Workspace data to find and summarize information, draft or send email, manage calendar events, work with files, and complete other workflows you request.

We request access only for connected features you authorize. Google data may be retrieved when needed or retained when necessary to provide business memory, requested workflows, security, or support. Relevant context may be sent to an AI or infrastructure provider only as needed to deliver the feature you requested and subject to applicable provider terms and safeguards.

You can disconnect Google through available PeakAgent account or support controls and through your Google Account's third-party access settings. Disconnecting stops new access and initiates removal or revocation of associated authorization credentials, subject to reasonable operational processing and the retention exceptions below.

PeakAgent's use and transfer of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

5. AI and automated processing

PeakAgent uses AI to draft, summarize, organize, route, recommend, schedule, research, and carry out workflows within the permissions you set. To do that work, we may send the model provider the instructions, messages, documents, records, or other context reasonably needed for the requested task.

We do not use your customer messages, connected-account data, business records, or assistant work product to train generalized AI or machine-learning models. AI providers process this information only as needed to provide the requested features under applicable terms. AI can make mistakes, so customers remain responsible for reviewing important outputs and selecting appropriate approval controls.

6. Human access to customer content

PeakAgent personnel do not routinely read identifiable customer content. Limited access may occur when you ask us to help, authorize us to inspect specific content, or when access is reasonably necessary to investigate a bug, security incident, abuse, or suspected policy violation; comply with law or valid legal process; protect rights or safety; or support a similarly narrow operational need. We limit any review to the people, content, and time reasonably necessary for that purpose.

7. How we share information

We may share information with providers that help us deliver the service, including categories such as:

• cloud hosting, database, storage, authentication, and security;
• AI model and related processing infrastructure;
• SMS, messaging, email, and voice communications;
• CRM, integration, workflow, and automation services;
• email, calendar, document, and other connected-platform APIs; and
• analytics, customer support, billing, and professional advisers.

These providers may process information only for the services they perform for us and subject to applicable agreements. We may also disclose information when required by law, to protect rights or safety, or as part of a corporate transaction with appropriate protections. We do not sell personal information or share it for third-party behavioral advertising.

8. SMS and messaging

If you provide your phone number and consent to messages, you may receive service, account, workflow, or promotional text messages from PeakAgent as described at the point of consent. Message frequency varies. Message and data rates may apply. Reply STOP to opt out of SMS messages or HELP for help. Opting out of SMS does not prevent communications through other channels where permitted.

We do not sell or share SMS opt-in information or consent with third parties for their own marketing. Providers that help deliver messages may process phone numbers, message content, and carrier delivery metadata as needed to provide that service.

9. Retention, disconnection, and deletion

We retain information while your account or service is active and for as long as reasonably necessary to provide requested features, maintain security and reliable operations, resolve disputes, enforce agreements, and meet legal obligations. Different categories of data may be kept for different periods based on their purpose and sensitivity.

You may request an export or deletion and may disconnect connected tools at any time. When a connection is removed, we stop new access and delete or revoke associated OAuth or API credentials within a reasonable operational period. Deletion may not be immediate in limited backups, security logs, or records we must retain for legal, fraud-prevention, billing, or security reasons. Residual copies are protected and removed or rendered inaccessible through ordinary retention cycles.

10. Security

We use administrative, technical, and operational safeguards designed to protect information, including encryption in transit and at rest, permission-based access, protected handling of connection credentials, and monitoring or logging where appropriate. PeakAgent's SOC 2 Type II review is in progress. No internet service can guarantee absolute security, and customers should protect their accounts and promptly report suspected unauthorized use.

11. Your privacy rights and choices

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or portability of personal information, and to withdraw consent where processing is based on consent. You may also disconnect tools or change assistant permissions. We may need to verify your identity before completing a request, and legal exceptions may apply.

California residents

California residents may have rights under the CCPA and CPRA to know, access, correct, or delete personal information and to receive information about its collection, use, and disclosure. PeakAgent does not sell personal information or share it for cross-context behavioral advertising. We will not discriminate against you for exercising an applicable privacy right. An authorized agent may submit a request where permitted by law and subject to verification.

12. Children

PeakAgent is a business service and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can review and delete it as appropriate.

13. International users

PeakAgent is operated from the United States. If you access the service from another country, information may be processed in the United States and other locations where our providers operate, which may have different data-protection laws. Where required, we use appropriate measures for international transfers.

14. Changes to this policy

We may update this policy as PeakAgent, our practices, or legal requirements change. We will post the revised policy here, update the date above, and provide additional notice when a change is material or when required by law. If a change materially affects how previously collected connected-account data is used, we will seek any consent required before applying that new use.

15. Contact

To exercise a privacy right, request deletion or export, disconnect a tool, or ask a question about this policy, contact support@peakagentai.com.