1. About this policy
The925 provides an organizational workspace, AI assistance, workflow automation and collaboration services through the925.org and app.the925.org. This policy explains how we access, use, store and share personal information, including information obtained through connected Google accounts.
When an organization provides your account, it controls workspace membership, permissions and the business purposes for which its information is used. Contact your organization about its internal policies. Contact The925 at [email protected] about our handling of information or a privacy request.
2. Information we collect
Account information includes your name, email address, organization, profile information and authentication records. Where password authentication is used, the service stores password hashes rather than your plain-text password.
Workspace information can include prompts, conversations, uploaded files, retrieved content used in answers, generated outputs, workflow records, action results and audit history. Operational information can include connection status, access times, IP addresses, browser or device information and security events.
When you connect a Google account, the services and permissions you authorize determine the information accessible to The925. This can include your Google account identifier, email address and profile; Gmail messages, threads, attachments, drafts and labels; Drive files, folders, metadata, permissions and comments; Docs, Sheets and Slides content; Calendar events and availability; and Meet spaces, settings, conference records, participants, recordings and transcripts.
Some Google permissions allow access across the connected account rather than only to files created by The925. Your Google account permissions and your workspace authorization controls still limit access. Connecting one service does not itself mean that every Google service is enabled.
3. How we use information
We use information to authenticate users, operate workspaces, enforce permissions, provide requested features, maintain service history and investigate security or reliability problems.
Google data supports user-facing workplace tasks. Gmail features include finding and reading mail, preparing and sending reviewed messages or drafts, and organizing messages. Drive, Docs, Sheets and Slides features include finding and reading existing information, answering questions, preparing deliverables, editing content and organizing supported files, comments or sharing permissions. Calendar and Meet features include availability checks, scheduling, conference creation and retrieving supported meeting information.
Actions depend on the services connected, permissions granted, available features and provider restrictions. Backend authorization and applicable confirmation requirements govern changes. Authorized workflows may carry out configured actions when their conditions are met.
4. AI processing and sharing
To answer a question, summarize connected information or prepare a requested action, relevant prompts, retrieved content and action results may be sent to the AI provider configured for that feature. Production OrgAI supports the OpenAI API or Microsoft Azure OpenAI. This processing can include Google data relevant to your request. Processing for inference is different from training a generalized AI model.
We do not use Google user data to train, retrain or fine-tune generalized AI or machine-learning models, and we do not authorize providers to use it for that purpose. Provider security and abuse-monitoring retention may apply; we do not promise zero retention by every external processor. Published provider information is available at https://developers.openai.com/api/docs/guides/your-data and https://learn.microsoft.com/en-us/legal/cognitive-services/openai/data-privacy.
We use Amazon Web Services for service infrastructure and storage and Cloudflare for network delivery and security. Relevant information may be processed by these providers to operate and protect the service. Information may also be shared with people permitted to access the relevant workspace record, or sent to a destination selected in an authorized workflow. Review the destination and content before approving a transfer.
Personal information may be processed outside your country, depending on the infrastructure and processors used for your workspace. Contact [email protected] for information about the provider arrangement applicable to your workspace.
5. Google data and Limited Use
The925's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy.
We limit Google data use to the relevant, prominent user-facing features described in this policy. We do not sell Google data, use it for advertising or transfer it to data brokers. We do not use it to determine creditworthiness or for lending purposes.
Transfers are limited to providing or improving the relevant user-facing features with user consent, security purposes, applicable legal requirements, or a merger, acquisition or asset transfer with explicit prior user consent, as permitted by Google's policy.
Our personnel may read Google data only with affirmative permission for specific information, where necessary for security, to comply with applicable law, or for permitted internal operations using aggregated data in accordance with Google's policy. These restrictions also apply to data derived from Google information.
6. Security
We use authentication, workspace authorization controls and encrypted connector-token storage to protect connected accounts. The connector token vault uses AES-256-GCM encryption, and production access uses HTTPS. No system can guarantee complete protection against every security incident. Keep your account credentials secure and report suspected unauthorized access to [email protected].
7. Retention and deletion
We retain connection credentials while a connection is active so the service can perform authorized requests. Disconnecting a connection removes its stored credentials and stops future access through that connection. It does not automatically erase saved conversations, generated outputs or workflow and audit records, or undo changes already made in Google. You can also revoke access through https://myaccount.google.com/connections.
Saved conversations, outputs and workflow or audit records may be retained while needed to provide workspace history, collaboration, accountability, security or legal compliance. Some source files and AI memory objects use configured expiry and cleanup processes; their expiry is separate from saved workspace history. Disabling a member or deleting a conversation does not necessarily erase every underlying record or backup.
To request access, correction or deletion of personal information or retained Google data, email [email protected]. Describe the relevant workspace and account, but do not send passwords or access tokens. We may need to verify your identity and authority and coordinate with your organization. The response will identify the applicable process and expected timing. Legal obligations, security needs and other users' rights may affect what can be deleted. No automatic account-wide deletion deadline is promised in this policy.
8. Changes and contact
We may update this policy as the service or its data practices change. The current version will show its last-updated date. Where required, we will provide notice and obtain consent before using Google data for a new purpose or accessing data not previously disclosed.
For privacy, data-use or deletion questions, contact [email protected]. Website: https://the925.org. Application: https://app.the925.org.