01Who operates CevroFlow
CevroFlow is the AI business email workspace at cevron.in, and the same team that builds it operates the service and the Google OAuth application that connects to your Gmail. There is no reseller, white-label operator, or third party running it under our name.
For anything about this policy, your data, or a data access or deletion request, write to hello@cevron.in. A person reads it and we respond within 30 days, and sooner for anything urgent.
02What we collect
We collect only what the product needs to work:
- Account information: your name and email address, provided through sign-in (Google or email).
- Workspace information: company name, business type, and timezone, provided during setup.
- Email data: the content and metadata of messages in your connected Gmail account, accessed through Google's Gmail permissions (read and, only when you approve a specific reply, send).
- Billing information: handled entirely by Dodo Payments. Card numbers never touch our servers.
- Usage data: which features you use and the AI processing cost of your workspace, so we can run the service reliably.
03How we use it
Your email content is used for exactly one thing: producing your workspace. Each message is analyzed once by our AI provider to generate its category, priority, summary, and suggested reply. The result is stored so we never need to analyze the same email twice.
We do not sell your data. We do not use your email content to train AI models, not ours, and not our provider's. We do not show you advertising.
04Google user data
CevroFlow requests three Gmail permissions: gmail.readonly to analyze your mail, gmail.send to deliver a reply (but only the one you explicitly approve), and gmail.modify, which we use for one narrow purpose: applying a star or read/unread change you make in CevroFlow to the actual message in Gmail, so the two don't drift apart. We do not use it to archive, move, label, or trash your mail.
We deliberately do not request full mailbox control (the https://mail.google.com/ scope), which is the permission that would allow permanently erasing mail. That one is a technical boundary enforced by Google rather than a policy promise. The limits on how we use gmail.modify are a policy commitment, and we state the difference plainly rather than blurring the two.
We also request the standard openid permission at connect time. It returns only a stable account identifier, which we use solely to stop one person opening unlimited free trials. It grants no access to your mail.
CevroFlow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
No human at CevroFlow reads your email, with one exception: if you ask for support on a specific message and give explicit permission first.
05Storage and retention
Your Google refresh token is encrypted before it is stored. Email content and AI results are stored scoped to your workspace, isolated from every other customer at the query level.
Disconnect Gmail and your tokens are revoked with Google and destroyed on our side immediately. Delete your account and your stored email content and AI results are deleted with it.
06AI Tools
CevroFlow AI Tools (cevron.in/tools) are free, standalone AI generators (an email writer, business document generators, marketing copy generators, and similar) separate from the Workspace product described above. Using them does not require connecting Gmail or creating a workspace.
If you use AI Tools without an account, we don't store what you generate; we only keep a usage count, tied to a random anonymous cookie, so we can enforce the free-usage limit. That cookie identifies a browser, not a person, and carries no other personal data.
If you use AI Tools signed in, your generations are saved to your account so you can find them again, the same way any other data associated with your account is stored: deleted when you delete your account, never sold, never used to train AI models.
The text you enter into an AI Tool (a brief, a topic, pasted email content) is sent to our AI provider to generate a result and is not stored beyond what's needed to produce and, for signed-in users, save that result.
09Your rights
You can disconnect Gmail at any time from your settings, which stops all syncing immediately. You can request a copy of the data we hold about you, or its deletion, by emailing us. We respond within 30 days.
If the GDPR applies to you (generally, if you're in the EU/UK/EEA), you have the right to access, correct, export, or delete your personal data, to restrict or object to certain processing, and to lodge a complaint with your local data protection authority. The requests above cover access, correction, export, and deletion; email us for the others.
If the CCPA/CPRA applies to you (California residents), you have the right to know what personal information we collect and why, to request its deletion, and to non-discrimination for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising, so there is no opt-out link to provide. That is the honest answer CCPA requires us to state plainly, not just imply.
10Changes and contact
If this policy changes in a way that matters, we email you before it takes effect. We do not silently update a page.
Questions about this policy: hello@cevron.in.
