Privacy

What Gulpy keeps

• Your email address. You sign in with it. Gulpy sends your sign-in codes to it.
• Your connections. For each tool: the name of the account at the provider, and the sign-in tokens from the provider. The tokens are encrypted.
• Your approvals. Which agent can use which tool, and the level: Read only, or Read and write.
• The list of calls. The agent, the tool, the time and the result (success or failure).
• Two cookies. One keeps you signed in. One protects your sign-in code. See Cookies.

What Gulpy does not keep

• The passwords of your tools. You sign in at the provider.
• The content of a call. When an agent uses a tool, the request and the answer go through Gulpy. Gulpy does not store them.

Information from Google

This applies to data from Google APIs, for example Gmail and Google Calendar. Gulpy asks only for the permissions of the tools that you turn on.

• Gulpy uses Google data only to do the calls that you, or an agent that you approved, ask for, and to show them in your list of calls.
• Gulpy sends Google data only to the agents that you approve for that tool, for security, when the law makes it necessary, or in a sale of the company after you agree first.
• People at Gulpy do not read your Google data. The exceptions: you give permission for specific data, it is necessary for security, or the law makes it necessary.
• Gulpy does not use Google data for advertising, does not sell it, and does not use it to develop, improve or train generalized or non-personalized AI or machine learning models.
• You can also stop access at myaccount.google.com/permissions.

Gulpy’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Information from Microsoft

If you connect Outlook or Microsoft 365, Gulpy uses the data only as this page says. Remove the tool in Gulpy to delete the tokens. You can also stop access at account.live.com/consent/Manage (personal accounts) or myapps.microsoft.com (work or school accounts).

How Gulpy uses your data

• To sign you in.
• To do the calls that you approved, for the agents that you approved.
• To show you what each agent did.
• To keep the service safe and to find errors.

Gulpy does not sell your data. Gulpy does not use your data for advertising. Gulpy does not use your data to train AI models.

Who gets your data

• The provider of a tool. When an agent uses a tool, Gulpy sends the request to the provider of that tool.
• The agent. The agent gets the answer of the provider, and the names of the accounts that you shared with it. Each agent gets a different user number for you. Each agent is a product of a different company, with its own privacy policy. Gulpy does not control what an agent does with the data.
• Our service providers. Railway operates the server. Resend sends the sign-in codes.
• Authorities. Only when the law makes it necessary.

Your controls

• Remove a tool. Gulpy deletes its tokens for that tool.
• Remove an agent. Its access stops immediately.
• Get a copy of your data. Open My tools, then Your account, and select Download my data.
• Delete your account. On the same page, select Delete my account. Gulpy asks each provider to cancel your tokens, then deletes all of your data. You can also write to privacy@gulpy.ai.

How long Gulpy keeps your data

• Your email address: until you delete your account.
• The tokens of a tool: until you remove the tool or delete your account.
• Your approvals: until you remove the agent or delete your account.
• The list of calls: 365 days. Then Gulpy deletes it automatically.
• Sign-in codes: 1 day after they expire. Sessions: when they expire.
• Tokens of agents that expired or that you removed: 30 days.
• When you delete your account, Gulpy deletes all of this immediately.
• We keep data longer only when the law makes it necessary.

Where your data is

Gulpy keeps your data in the United States. If you use Gulpy from a different country, your data goes to the United States. The laws there can be different from the laws in your country.

Your rights

Where you live, the law can give you the right to see, correct, delete or move your data, and to object to its use. Send a message to privacy@gulpy.ai from the email address of your account. We answer in one month or less. In the EU and the UK you can also complain to your data protection authority. Gulpy does not sell or share personal information as the California law defines these words.

Cookies

Gulpy sets two cookies. Both are necessary to sign you in and keep your account safe.

• gulpy_session keeps you signed in. It ends when you close the browser. If you select "Keep me signed in", it stays for 30 days, or until you sign out.
• gulpy_signin ties your sign-in code to the browser that asked for it. It stays for 10 minutes.

Gulpy has no analytics, advertising or third-party cookies, and loads no scripts from other companies. If you block these cookies, you cannot sign in. Gulpy does not track you on other sites.

Security and incidents

Gulpy encrypts the tokens of your tools and uses https for each connection. No system is perfectly secure. If a security incident affects your personal information, we tell you and the authorities as the law requires. See the Security page.

Children

Gulpy is not for persons less than 18 years old. If we find that a child gave us data, we delete it.

Changes and questions

If this page changes, the date at the top changes. For an important change, we send a message to your email address before it starts. We do not use Google data in a new way before you agree. Gulpy is responsible for your data (the "controller"). Send questions to privacy@gulpy.ai.