Privacy Policy

Information we handle

When you sign in with Google, we receive your basic identity information, including your name, email address, and profile image. We also process the conversations, Bot profiles, memories, reminders, files, and other content you choose to create or share in Supernala.

We process account, subscription, purchase, and usage records needed to provide paid features. Technical information such as session data, device and browser information, security events, and service diagnostics helps us operate and protect the service.

How we use information

We use this information to authenticate you, deliver and improve Supernala's features, respond to requests, administer billing and support, prevent abuse, and maintain service reliability. Conversation content and authorized files may be sent to AI model providers to generate the Bot responses and actions you request.

Google Calendar and Limited Use

Connecting Google Calendar is optional and separate from Google sign-in. We request openid and email to identify the connected account, and https://www.googleapis.com/auth/calendar.events to read, create, update, and delete events for the calendar features you authorize. We process event identifiers, titles, descriptions, locations, dates, times, and synchronization information to provide those features.

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

We do not use, transfer, or sell Google Workspace API user data, including raw, aggregated, anonymized, or derived data, to create, train, or improve foundational or generalized AI or machine learning models. Our permission to process your content does not authorize that use. Google user data is used only to provide the user-facing features you authorize and for other uses permitted by the applicable Google user data policies.

AI processing of connected data

Google Calendar event content may become part of a Bot's authorized context and may be processed by third-party AI services to respond to your requests. These services generate Bot responses and, when enabled, help evaluate Bot participation, tool use, reasoning, and memory.

We restrict these AI requests to designated providers, disable fallback to other providers, and require data-policy filtering to exclude training-enabled routes. Google Workspace data must not be processed through settings that permit generalized model training. These are hosted API integrations, not self-hosted or offline models. A no-training restriction does not mean zero data retention: providers may retain information under the terms applicable to the service. Our own retained records are described below.

Analytics and privacy signals

We use Maple for website and product analytics and performance monitoring. Maple receives events such as page views, feature interactions, and account or purchase milestones, as well as technical diagnostics. Product analytics events do not include the content of your messages or conversations.

In production, Maple stores a persistent anonymous visitor ID in browser storage and a cookie shared across our subdomains, so a visit to the marketing site can be linked to later use of the app. After sign-in, analytics may also be associated with your account ID. We disable DOM session replay and mask page text and input values in browser telemetry. We honor Global Privacy Control (GPC) and Do Not Track (DNT) signals by not persisting the anonymous visitor ID when either is enabled; analytics collection may still continue without that persistent ID.

Service providers and connected accounts

Supernala relies on providers for hosting, storage, authentication, AI processing, payment and billing, and operational monitoring. If you connect an external account through a Plugin, we use that connection for the actions you authorize; connecting a Plugin is separate from signing in with Google. Providers may process information needed to deliver their part of the service.

Storage, security, and deactivation

We retain information while it is needed to operate your account, preserve conversation history, support billing and security, and meet applicable obligations. Deactivating an account or deleting a Bot or conversation removes access and stops new work, but does not immediately physically erase retained records. We use access controls and other safeguards to protect information, though no online service can guarantee absolute security.

Your choices and contact

You can manage your Bots, conversations, connections, and account within Supernala. For questions about your information or to request help with an account, contact hanif@fungsi.app. We may update this policy and will publish the revised version here with an updated date.