Google API Compliance

What we access

Calendar and email are requested together as one connection, because loyd cannot schedule well without the thread a request arrived on. When you connect your Google account, Loyd requests:

• Google Calendar (read and write) — to check availability, and to create and update events at your direction
• Gmail (read-only) — to read the threads loyd is working in, so it understands what is being scheduled and who is involved. We do not request permission to delete your mail or to empty your mailbox.
• Basic profile (name, email address, profile picture) — to identify the account you connected

Gmail read access is a Google sensitive scope, so Loyd has completed Google's CASA security assessment in order to request it. A per-permission breakdown is on our permissions page.

How we use it

Google data is used solely to operate Loyd's user-facing features: checking availability, scheduling and updating meetings, understanding the thread a request came in on, drafting replies for you to approve, and keeping the records you asked loyd to keep.

Loyd does not build or operate its own AI models. AI features run on third-party model providers' commercial APIs, currently OpenAI and Anthropic, and only the context needed to answer the request in front of loyd is sent. Those providers are contractually prohibited from using it to train or improve their models. Your Google data is never used to train, fine-tune, or improve any AI or machine learning model, by us or by anyone else. The full provider list is on our subprocessors page.

Our commitments

• ✓Never used for advertising or ad targeting
• ✓Never used to train, fine-tune, or improve any AI or machine learning model
• ✓Never sold or transferred to third parties for their independent use
• ✓Never read by a human, except with your affirmative agreement for specific messages, for security purposes, to comply with applicable law, or where the data is aggregated and anonymized for internal operations
• ✓Encrypted in transit and at rest to keep your data secure
• ✓Deleted within 30 days of account disconnection or deletion

Revoking access and deleting data

Disconnect your Google account at any time from your Loyd settings, or revoke Loyd's access from your Google account permissions page. To request deletion of Google data we hold, email privacy@loyd.ai with the subject "Data Deletion Request." We process requests within 30 days and confirm by email.

Questions

Email support@loyd.ai or see our full scope breakdown and Privacy Policy.