Google API Compliance

What we access

Calendar and email are requested together as one connection, because loyd cannot schedule well without the thread a request arrived on. When you connect your Google account, Loyd requests:

• Google Calendar (read and write) — to check availability, and to create and update events at your direction
• Gmail (read-only) — to read the threads loyd is working in, so it understands what is being scheduled and who is involved. We do not request permission to delete your mail or to empty your mailbox.
• Basic profile (name, email address, profile picture) — to identify the account you connected

Gmail read access is a Google sensitive scope, so Loyd has completed Google's CASA security assessment in order to request it. A per-permission breakdown is on our permissions page.

How we use it

Google data is used solely to operate Loyd's user-facing features: checking availability, scheduling and updating meetings, understanding the thread a request came in on, drafting replies for you to approve, and keeping the records you asked loyd to keep.

Loyd does not build or operate its own AI models. AI features run on third-party model providers' commercial APIs, currently OpenAI and Anthropic, and only the context needed to answer the request in front of loyd is sent. Those providers are contractually prohibited from using it to train or improve their models. Your Google data is never used to train, fine-tune, or improve any AI or machine learning model, by us or by anyone else. The full provider list is on our subprocessors page.

Sharing with your team

When a contact is shared with your Loyd workspace, teammates can see that you interacted with that person (who, what kind of interaction, and when), but not what it was about. If you turn on "Show my team my subject lines", they can also see the subject lines of your Gmail messages and the titles of your Google Calendar events with contacts shared with the workspace. The setting is off by default, and it uses the Gmail and Calendar access listed above, with no additional permission.

Teammates never see message bodies, attachments, or snippets, and never see events marked private or confidential. Subject lines and titles are read live from your account when a teammate views the contact, and are not copied or stored. Each such read is logged, without the subject line itself. Turning the setting off stops it immediately.

Our commitments

• ✓Never used for advertising or ad targeting
• ✓Never used to train, fine-tune, or improve any AI or machine learning model
• ✓Never sold or transferred to third parties for their independent use
• ✓Shown to teammates only as you choose: subject lines and event titles, and only if you turn that on
• ✓Never read by anyone at Loyd, except with your affirmative agreement for specific messages, for security purposes, to comply with applicable law, or where the data is aggregated and anonymized for internal operations
• ✓Encrypted in transit and at rest to keep your data secure
• ✓Deleted within 30 days of account disconnection or deletion

Revoking access and deleting data

Disconnect your Google account at any time from your Loyd settings, or revoke Loyd's access from your Google account permissions page. To request deletion of Google data we hold, email privacy@loyd.ai with the subject "Data Deletion Request." We process requests within 30 days and confirm by email.

Questions

Email support@loyd.ai or see our full scope breakdown and Privacy Policy.