Privacy policy

Effective September 15, 2026

This policy explains how Rallybrook ("we") handles information when an authorized user uses Rallybrook Workspace, our private productivity application for email, notes, tasks, calendars, search, and related workflows.

Information we collect

We collect information you provide to Workspace, such as your account profile, notes, tasks, calendar entries, settings, and support communications. We also collect limited operational information, including request logs, error details, device and browser information, and security events needed to operate and protect the service.

When you connect a Google account, Google OAuth lets you choose whether to grant access. Depending on the features you authorize, Workspace may access your Google account identity; Gmail data, including messages, threads, headers, labels, attachments, drafts, send-as settings, filters, and other mailbox settings or metadata; Google Contacts; Google Calendar lists, events, and related event metadata; and Google Drive files that you select for use with Workspace.

How we use information

We use information to authenticate you; sync, display, organize, search, summarize, and help you act on your email and other Workspace content; create search indexes and embeddings; send or modify email and Gmail settings when you direct the application to do so; show contact suggestions; read or update calendar events; work with Google Drive files you select; provide reminders and automations you configure; maintain security; diagnose failures; and improve reliability.

Rallybrook Workspace's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, sell it, or allow humans to read it except with your affirmative agreement for support, when required for security, to comply with law, or when the data has been aggregated and anonymized for internal operations.

Storage, protection, and retention

Workspace stores the data required to provide its features with service providers that host our application, databases, object storage, and monitoring. We use access controls, encryption in transit, encryption at rest where supported, and encrypted OAuth credentials. No security measure is perfect, but we limit access to people and systems that need it to operate the service.

We retain connected-account data and derived search data while your account is connected and as needed to provide the service, satisfy legal obligations, resolve disputes, and protect the service. Disconnecting a Google account stops future access. You can also revoke Rallybrook Workspace in your Google Account permissions. To request deletion of stored data, contact us at hello@rallybrook.com.

Sharing

We share information only with infrastructure and service providers acting on our behalf, when you direct us to interact with another service or recipient, during a business transfer, to protect rights and safety, or when legally required. Providers may process information only to perform the services we ask them to provide. We do not sell personal information.

Your choices

You can choose which Google account to connect, disconnect an account in Workspace, revoke access through Google, and ask us to access, correct, export, or delete information associated with your Workspace account. Some information may remain in backups or records we must retain for security or legal reasons.

Changes and contact

We may update this policy as Workspace changes. We will update the effective date and provide additional notice when a change materially affects how we use your information. Questions or privacy requests can be sent to hello@rallybrook.com.