Privacy Policy
Last updated: February 27, 2026
Monocles AI, Inc. ("Monocles", "we", "us", or "our") operates the Monocles platform at https://monocles.ai. This Privacy Policy describes how we collect, use, and protect your information.
1. Information We Collect
Account Information
- Email address (used for authentication)
- Name (if provided)
- Organization/workspace name
Data You Connect
When you connect third-party services (e.g., Gmail, Dropbox), we access data according to the permissions you grant:
-
Gmail: Email metadata (sender, recipient, subject, date), email body content for AI classification, and contact information. We request the following scopes:
gmail.readonly— Read email messagesgmail.send— Send emails on your behalf (only with your explicit approval)gmail.modify— Manage labels and draftsuserinfo.email— Identify your Google account
-
Dropbox: Files and folders you choose to sync for document analysis.
Usage Data
- Pages visited, features used, and interaction patterns (for product improvement)
- Browser type, device information, IP address
2. How We Use Your Information
- AI-Powered CRM: We process your connected email data to extract contacts, classify relationships, detect action items, and provide business intelligence.
- Email Drafting: Our AI may draft email responses for you. Emails are never sent automatically — you must explicitly approve each draft before sending (Human-in-the-Loop).
- Authentication: To verify your identity and manage your account.
- Product Improvement: Aggregated, anonymized usage data to improve features.
3. Data Storage and Security
- OAuth tokens (Gmail, Dropbox) are encrypted at rest using AES-128-CBC with HMAC-SHA256 (Fernet encryption).
- All data is transmitted over HTTPS/TLS.
- Data is stored on secure servers hosted by US-based cloud infrastructure providers.
- We do not store raw email content permanently — only AI-generated summaries and extracted metadata.
4. Data Sharing
We do not sell your personal data. We share data only in these cases:
- AI Processing: Email content is sent to language model providers (OpenAI via OpenRouter) for classification and summarization. This data is not used for model training.
- Service Providers: Cloud hosting, authentication and other infrastructure providers that help us operate the platform, bound by data processing agreements.
- Legal Requirements: If required by law, regulation, or legal process.
5. Your Rights
- Disconnect: You can disconnect any third-party service at any time from Vault > Data. This immediately revokes our access.
- Delete Account: Contact us to delete your account and all associated data.
- Data Export: Request a copy of your data by contacting us.
- Revoke Access: You can also revoke Monocles' access directly from your Google Account permissions.
6. Google API Services User Data Policy
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We only use Google user data for the purposes described in this privacy policy. We do not:
- Transfer Google user data to third parties except as necessary to provide or improve user-facing features
- Use Google user data for advertising
- Use Google user data for training AI/ML models
7. Data Retention
- Account data is retained while your account is active.
- Connected service data (email summaries, contacts) is retained until you disconnect the service or delete your account.
- OAuth tokens are deleted immediately upon disconnection.
8. Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.
9. Children's Privacy
Monocles is not intended for use by children under 13. We do not knowingly collect data from children.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or in-app notification.
11. Contact Us
For privacy questions or data requests:
- Email: privacy@monocles.ai
- Website: https://www.monocles.ai