Privacy Policy

Last updated on February 9, 2026.

Overview

This Privacy Policy explains how Behalf collects, uses, and shares information when you use our website, web app, and connected messaging and automation features.

Google API Services User Data

Behalf's use and transfer of information received from Google APIs adheres to Google API Services User Data Policy, including Limited Use requirements.

Information We Collect

• Account and profile data. Information such as your email address, display name, avatar, timezone, chosen calendar ID, personalization notes, and app settings.
• Authentication and session data. Google OAuth tokens (including refresh tokens), granted OAuth scopes, hashed session tokens, and session metadata such as user agent, IP address, last seen time, and expiry.
• Google Workspace data you authorize. Gmail message metadata and content needed for requested actions, and Google Calendar event details needed for scheduling and calendar operations.
• Chat, task, and workflow data. Messages, generated outputs, tool calls/results, task prompts, task statuses, workflow events, and orchestration metadata.
• Uploaded files and attachments. Files you upload in chat or send through linked channels, plus related metadata (filename, mime type, size, storage location).
• Telegram data (if linked). Telegram chat IDs, usernames, message content, and attachment metadata used to run and maintain Telegram conversations.
• Email ingress data. If email forwarding is used, inbound message envelope/header fields, subject, and message body content are processed.
• Analytics and diagnostics. Product analytics, conversion events, runtime logs, traces, and error telemetry used for service reliability, debugging, and abuse prevention.

How We Use Information

• Provide the Service, including chat assistance, task orchestration, scheduling support, and browser-agent handoffs.
• Authenticate users, maintain sessions, and secure account access.
• Run AI inference and tool execution needed to fulfill your requests.
• Operate, monitor, and improve service quality and safety.
• Communicate product, operational, or support information.

AI and Automation Processing

To respond to requests, relevant prompt context may be processed by model and tooling providers configured in our stack, including OpenRouter-routed model providers and Exa for live web search. Browser agent execution may also interact with third-party websites you direct us to use.

Our automation workflows are designed to request explicit user confirmation before sensitive actions. You remain responsible for reviewing and approving those actions.

How We Share Information

We share information only as needed to provide the Service, comply with law, or protect rights and safety.

• Google Cloud for application hosting, job execution, storage, and infrastructure operations.
• Google APIs for OAuth, Gmail access, and Calendar operations authorized by you.
• OpenRouter and configured model providers for AI inference.
• Exa for optional web search functionality.
• PostHog for product analytics and telemetry.
• Telegram when you use linked Telegram workflows.
• Cloudflare for inbound email worker delivery to our API.

We do not sell personal information. We do not use Google user data for advertising.

Data Retention

We retain account, conversation, task, and integration data while your account is active and as needed for operational, legal, and security purposes. Session records and diagnostic logs are retained for limited periods based on system and compliance needs.

Your Choices

• Update profile, timezone, and personalization in settings.
• Revoke Google access from your Google account at any time.
• Unlink or stop using Telegram integrations at any time.
• Request data deletion or account assistance by contacting [email protected].

Security

We use technical and organizational safeguards designed to protect information in transit and at rest. No method of transmission or storage is fully secure.

Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children.

Changes

We may update this Privacy Policy from time to time. The Last updated date reflects the latest revision.

Contact

Privacy questions or requests: [email protected].

General support: [email protected].

Terms are available at Terms of Service.