Privacy Policy

Last updated: May 2026

Guthrie AI ("we", "our", or "us") respects your privacy and is committed to responsible processing of personal information. This Privacy Policy explains how information is collected, used, stored, shared, and protected when using the Guthrie AI platform to manage client communications, RFQ workflows, proposals, and related project communications.

Scope and Applicability

This Privacy Policy applies to users of Guthrie AI and covers data processed through our web application, including integrations with Google services where enabled by the user.

Google Account Access

If a user chooses to connect a Google account, Guthrie AI may request limited Gmail permissions to allow authenticated users to compose and send emails directly from within the platform.

Guthrie AI may access, collect, or interact with the following Google user data:

• User email address and basic Google account profile information
• OAuth access tokens, refresh tokens, and related account-linking information
• Gmail permissions required to compose and send emails on behalf of the authenticated user
• Email recipients, subject lines, message bodies, attachments, and related email metadata explicitly created, selected, or submitted by the user through the platform
• Email delivery status or related technical metadata needed to confirm, troubleshoot, or support the sending of user-requested emails

Guthrie AI only requests Google API scopes and permissions that are necessary to provide user-requested email functionality.

How We Use Google User Data

Google user data is used solely to provide and support user-requested functionality within Guthrie AI, including composing, managing, and sending RFQs, proposals, and project-related communications on behalf of authenticated users.

Guthrie AI uses Google user data only for the following purposes:

• Connecting a user's Google account to Guthrie AI
• Authenticating the user with Google OAuth
• Composing and sending emails requested by the authenticated user
• Displaying or managing email-related actions initiated by the user within Guthrie AI
• Maintaining, securing, troubleshooting, and supporting the email functionality of the platform

Guthrie AI does not use Google user data for advertising purposes. Guthrie AI does not sell Google user data to third parties.

Guthrie AI does not read, process, or store Gmail inbox content beyond what is necessary to perform user-requested actions. Email content accessed through Google APIs is used only to provide the requested email functionality.

Google Workspace API data is not used to develop, improve, or train generalized artificial intelligence or machine learning models.

Data Sharing and Transfer

Guthrie AI does not transfer Google user data to third parties except in the limited circumstances described below:

• As necessary to provide, maintain, or secure the Guthrie AI service
• As necessary to send emails to recipients selected or entered by the authenticated user
• To comply with applicable law, legal obligations, or valid legal process
• With the explicit consent or direction of the authenticated user

Guthrie AI does not share Google user data with third parties for advertising, marketing, profiling, or unrelated analytics purposes.

Data Storage and Retention

OAuth access tokens, refresh tokens, and related account-linking credentials are stored using reasonable technical and organizational safeguards. Access to these credentials is restricted to authorized systems and personnel with a legitimate operational need.

Guthrie AI retains Google user data only for as long as necessary to provide requested functionality, maintain service operations, comply with legal obligations, resolve disputes, and enforce contractual requirements.

Email content created or submitted by users through Guthrie AI may be retained where necessary to support RFQ workflows, project history, auditability, customer support, or other platform functionality requested by the user or their organization.

Users may revoke Gmail access at any time through their Google account security settings or by disconnecting their account within Guthrie AI where available.

Data Security

We take reasonable measures to protect user information from unauthorized access, loss, misuse, alteration, or disclosure. Access to sensitive data is restricted to authorized personnel and systems with a legitimate business or operational need.

Third-Party Services

Our platform integrates with third-party providers, including Google APIs, only to deliver user-requested functionality.

Guthrie AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

User Choices

Users may disconnect linked Google accounts at any time through account settings where available. Disconnecting an account stops further Gmail access from the platform for that user.

Users may also revoke Guthrie AI's access directly from their Google account permissions page.

Data Deletion Requests

Users may request deletion of connected-account data by contacting their organization administrator or support contact. We will process deletion requests in accordance with applicable legal and contractual requirements.

Policy Updates

We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes. The "Last updated" date above indicates when this policy was most recently revised.