‹ Back to home

Eutunia Privacy Policy

Last updated: August 24, 2026
CONTENTS

1. Who We Are and Scope of This Policy

Eutunia is an AI customer success management work system currently operated and provided by Dennis Yao (姚順) in his personal capacity ("Eutunia," "the Service," or "we"). This policy explains how we collect, use, retain, share, and delete personal data when you visit eutunia.com and its subdomains, or register for and use the Service.

This policy also applies to features you actively connect, such as Google, Slack, Google Calendar, and meeting recording. If a company or team adds its customer, contact, or meeting data to Eutunia, that company or team remains responsible for confirming it has the lawful right to provide and use such data.

If you have questions about this policy, email us at [email protected].

2. What Data We Collect

Depending on the features you actually use, we collect the following data:

  1. Account and workspace data: name, email, Google account avatar, workspace name, team role, and the customer companies, contacts, tasks, and notes that you or your team members provide.
  2. Google account and Gmail data:
    • When you sign in, we receive basic account information from Google, such as your name, email, and avatar.
    • After you separately consent to connecting your mailbox, we read the necessary metadata of recent Gmail threads, such as sender, recipients, time, thread counts, and the short snippets provided by the system, to identify likely business contacts and company domains.
    • The mailbox scan itself does not save full email bodies, subjects, or snippets as import results; only after you confirm an import are the selected contacts' names, emails, company domains, and interaction counts stored in your workspace.
    • Only after you edit the recipients, subject, and content in Eutunia and explicitly confirm sending do we send the email on your behalf through the Gmail API, and we keep the send time, subject, and Gmail thread ID as an interaction record.
  3. Google Calendar and meeting data: after you enable the calendar or meeting recording features, we may process calendar event titles, times, attendees, meeting links, and the recordings, transcripts, speakers, and AI analysis results produced by the meeting recording service.
  4. Other integration data: when you actively connect services such as Slack, we process channels, messages, member names, and related interaction data within the permissions you grant, to provide sync, summary, or sending features.
  5. Technical and security data: sign-in cookies, IP address, browser and device information, request times, error records, and necessary security logs. This data is mostly generated by our hosting, database, or authentication providers while delivering and protecting the Service.

If you do not provide basic account information, you will not be able to create or sign in to an account. If you do not grant Google, Slack, calendar, or meeting permissions, you can still use features that do not rely on that integration, but the corresponding sync, email, or meeting features will not be available.

3. How We Use Data

We use data only to the extent necessary for the following purposes:

  1. Creating accounts, verifying identity, and managing workspace permissions.
  2. Displaying and managing customer companies, contacts, interactions, meetings, and tasks.
  3. Scanning and importing business contacts, connecting calendars, recording meetings, or sending emails, each at your choice.
  4. Generating the meeting summaries, action suggestions, content drafts, or other AI-assisted results you request.
  5. Providing support, troubleshooting, preventing abuse, and keeping the Service secure.
  6. Complying with applicable law or lawful requests from competent authorities.

We do not sell personal data, and we do not use Google Workspace API data to serve advertising, build credit scores, conduct surveillance, or develop, improve, or train non-personalized or generalized AI/ML models.

4. Special Notes on Google User Data

Eutunia may currently request the following Google permissions:

The Google user data we receive is used only for Eutunia features that you can see and have actively enabled. We do not transfer Google user data to other third parties, except to service providers as necessary to deliver those features, to maintain security, or to comply with the law. We do not allow humans to read your non-public Google user data, unless you give separate explicit consent for specific data, or it is necessary for handling security incidents or complying with the law.

When you enable Google Calendar and meeting recording, your Google OAuth credentials and calendar data are processed by Recall.ai as necessary to provide the feature; meeting transcripts and related content may be processed by Anthropic to generate the AI analysis you request. This data is used only to provide the user-facing features you enable, and not for advertising or training generalized AI models.

Eutunia's use and transfer of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Eutunia's use and transfer to any other app of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Who We Share Data With

We share data only to the extent necessary to provide and protect the Service, with the following parties:

  1. Authorized members of your workspace: they can view the data you or your team jointly created, imported, or saved, according to workspace roles and permissions. Other members do not thereby gain direct access to your Gmail mailbox.
  2. Service providers: for example, providers of hosting, database, authentication, background jobs, email delivery, AI analysis, and meeting recording services. These currently mainly include Vercel, Supabase, Google, Recall.ai, Anthropic, Inngest, Resend, and Cloudflare. These providers process data only to the extent necessary to provide services on our behalf.
  3. Legal and security needs: when necessary to comply with the law or lawful requests from courts or competent authorities, or to investigate fraud, abuse, or security incidents.

If the Service later becomes operated by a newly formed company, or is involved in a merger, acquisition, or asset transfer, we will notify you as required by applicable law before personal data is transferred, and require the successor to continue protecting it under this policy or with protections no weaker than this policy.

6. Where Data Is Processed

We and our service providers may process data in Taiwan, Japan, the United States, or other regions where they operate. Data protection rules may differ across regions; we require service providers to process data only for the purposes necessary to deliver their services and to apply appropriate safeguards.

7. Data Retention and Deletion

  1. Account and workspace data is kept, in principle, until it is no longer needed to provide the Service, until you or a workspace administrator deletes it, or until you make a lawful deletion request; where necessary for security, dispute handling, or legal requirements, it may be retained for the necessary period.
  2. Google access tokens, refresh tokens, and calendar connection data are kept until you disconnect Google, delete your account, the authorization expires, or the feature is no longer needed.
  3. After you disconnect Google, we stop new Gmail and calendar access, and delete the Google credentials stored by Eutunia and the Recall.ai calendar connection. Disconnecting does not automatically delete contacts you previously confirmed importing into your workspace, interaction records of emails already sent, or completed meetings, recordings, and analysis results; to delete this data, please make a request through the product features or the email address listed in this policy.
  4. Residual data in system backups and security logs may be deleted later, following normal overwrite and backup cycles.

8. Your Choices and Rights

Under applicable law, you may request to access or review your personal data, obtain a copy, supplement or correct it, stop its collection, processing, or use, and delete it.

You can:

To prevent impersonation, we may ask you to provide reasonable identity verification. We will handle requests within the time limits required by applicable law; where we may lawfully refuse, limit, or retain some data, we will explain the reasons.

If your data was added to Eutunia by your employer, team, or another business customer, that organization may be the party deciding how the data is used. You can raise your request with that organization first; we will assist within a reasonable scope.

9. Cookies

We use cookies necessary for sign-in and security, to keep you signed in and protect your account. We currently do not use Google Workspace API data to build advertising audiences or perform cross-site tracking. If your browser fully disables necessary cookies, some sign-in features may not work properly.

10. Data Security

We take reasonable technical and organizational measures proportionate to the scale of the Service and the nature of the data, such as HTTPS encryption in transit, access controls, and database permission isolation, to reduce the risk of unauthorized access, alteration, disclosure, or loss. However, no online service can guarantee absolute security.

11. Minors

The Service is a tool for businesses and their staff, and is not primarily directed at children or minors. If you believe a minor has provided us personal data without appropriate consent, please contact us.

12. Changes to This Policy

If we change how we collect, use, or share data, we will update this page and the "Last updated" date. If a change materially affects your rights or how Google user data is used, we will notify you in a reasonable way before the new use begins and, where applicable, obtain your consent again.

13. Contact

This policy is intended to clearly describe how Eutunia actually handles data today, and is not a commitment about features that have not launched. If the Service's features or operating entity change, we will update this policy accordingly.

← Back to home