Privacy Policy

• Account details you or we enter: name, email, phone, company and role.
• Work records: projects, tasks, timesheets, invoices, meeting notes and messages linked to projects.
• Basic usage and performance data (pages visited, load times) to keep the site working.

A Softles team member can connect their Google account. We request only the access each feature needs, use it only for the account that granted it, and only to provide that feature to that person:

• Google sign-in (name, email address, profile picture): to log you in.
• Google Calendar (event titles, times, attendees): to show meetings and link them to projects.
• Google Contacts (contact names, emails, phone numbers, companies) and the sender and recipient addresses in Gmail message headers: to keep our client list current.
• Gmail (read, label, archive, filter, trash, draft): so the account owner, directly or through the AI assistant they use with Softles Labs (such as Claude), can search their mail, sort it into labels, archive it, set up Gmail filters, move unwanted mail to Trash (which Gmail keeps for 30 days) and prepare draft replies. Softles Labs never sends email from your Gmail account and never permanently deletes mail.

What we store. For a connected mailbox we store the email address, an encrypted (AES-256) sign-in token so the connection keeps working, and a log of changes made through Softles Labs: the search used, labels added or removed, and how many messages were affected. We do not store email bodies or attachments; they are fetched from Google when you ask for them and are not kept afterwards.

Who can see it. Only the person who connected the account (and the AI assistant acting on their request) works with its mail. No one else at Softles reads your Google data unless you ask us to, it is needed to investigate a security issue, or the law requires it.

Limited Use.Softles Labs' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not use it to develop, improve or train generalized or non-personalized AI or machine-learning models.

To provide and secure Softles Labs: running projects and timesheets, sending invoices and receipts, organising client communication, and the Google features above. We don't use your information for advertising.

We don't sell or rent personal data. It is processed only by the service providers that run Softles Labs for us: Vercel (hosting), Supabase (database), Resend (transactional email) and, when you ask an AI assistant to work with your data, that assistant's provider, for that request only. We may disclose information if the law requires it.

Work records are kept while they are needed for the work and for our accounting and tax obligations. Disconnecting a Google account in Softles Labs revokes our access and deletes its stored token straight away. You can also remove access at any time from your Google account permissions. To see, correct or delete your data, email shakti@softles.in and we'll respond within 30 days.

Data is sent over HTTPS, access is limited to signed-in users with the right role, and sign-in tokens for connected Google accounts are encrypted at rest.

If our practices change we'll update this page and its effective date. Questions or requests: shakti@softles.in, SOFTLES LABS, Shamli, Uttar Pradesh, India.