poweaiLegal & Trust
Legal Center/Privacy Policy

Privacy Policy

How PoweAI handles personal information, written in plain English. The short version: your business data powers your Business Brain, and nothing else.

Last updated October 16, 2026Effective October 16, 2026Draft for attorney review
On this page
  1. At a glance
  2. Our two roles
  3. Information we collect
  4. How we use information
  5. Google user data
  6. AI processing
  7. How we share information
  8. Retention
  9. Security
  10. Your rights and choices
  11. US state privacy rights
  12. Children
  13. Where we process data
  14. Changes to this policy
  15. Contact

This Privacy Policy explains how PoweAI legal entity name ("PoweAI," "we") collects, uses, shares and protects personal information when you visit poweai.com, use the PoweAI platform, or exchange messages with PoweAI. It also serves as our notice at collection under California law.

At a glance

  • We do not sell personal information, and we do not share it for cross-context behavioral advertising.
  • We do not use Google user data for advertising or to train generalized AI or machine-learning models.
  • We do not share mobile phone numbers or SMS opt-in data and consent with third parties or affiliates for marketing or promotional purposes.
  • You stay in control. You can disconnect tools, delete your data, and opt out of messages at any time.

Our two roles

For your own account, we decide how data is used. For the business data you connect, we act on your instructions.

As a business ("controller"). We are responsible for personal information about website visitors, account holders, Authorized Users, prospects and people who contact us.

As a service provider ("processor"). When a customer connects its tools, PoweAI processes personal information inside that business's data, such as the names and messages of its clients, vendors and staff, on the customer's behalf and under our Data Processing Addendum. If your information appears in a PoweAI customer's email, calendar or records and you want to exercise privacy rights, please contact that business. We will support it in responding.

Information we collect

CategoryExamplesSource
Account and contactName, business name, email, phone number, role, login credentialsYou
Connected Service dataGmail messages and metadata, calendar events, contacts, website content, accounting and CRM recordsConnected Services you authorize
Conversations with PoweAIMessages to and from PoweAI by SMS, WhatsApp or in the app, your approvals, corrections and preferencesYou and your Authorized Users
BillingBilling contact and address, limited payment details (card numbers are handled by our payment processor)You and our payment processor
Device and usageIP address, browser, device type, pages viewed, feature usage, log and diagnostic dataAutomatically, from your browser or app
Support and feedbackSupport requests, design partner feedback, survey responsesYou

Business email and records can incidentally contain sensitive information (for example, a client mentioning a health issue in an email). We do not seek sensitive information. We process it only as part of providing the Service you requested, and we do not use it to infer characteristics about anyone.

How we use information

  • Provide the Service: build and maintain your Business Brain, detect business events, prepare briefs, drafts and recommendations, and take the actions you authorize.
  • Communicate with you: send service messages, briefs, alerts, approval requests and account notices.
  • Keep PoweAI secure: authenticate users, prevent fraud and abuse, and investigate incidents.
  • Support you: answer questions and troubleshoot.
  • Improve PoweAI: using Usage Data, and using your Customer Data only to improve the features you use. Data from Google APIs is never used for general product improvement or model training.
  • Meet legal obligations: comply with law, enforce our terms, and protect rights and safety.
  • Business marketing: send product updates to business contacts, who can opt out at any time. We never use Customer Data or Google user data for marketing.

Google user data

We use your Gmail and Calendar data only to power the features you see in PoweAI. Nothing more.

PoweAI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • What we access. With your permission, we access Gmail messages and metadata and Google Calendar events. We start with read-only access. We request broader permissions, such as creating drafts or sending email for you, only when you enable features that need them.
  • How we use it. Only to provide and improve user-facing features in PoweAI: detecting business events, building your Business Brain, preparing briefs and drafts, and taking actions you authorize.
  • Transfers. We transfer Google user data only as needed to provide those features (for example, to our AI model and hosting providers under contract), for security, to comply with law, or as part of a merger or acquisition with your prior consent.
  • Human access. Our staff do not read your Google user data unless you give us permission (for example, for a support request), it is needed for security or to comply with law, or the data is aggregated and anonymized for internal operations as the policy allows.
  • Never: sold, used for advertising or retargeting, provided to data brokers or information resellers, used to determine creditworthiness or for lending, or used to develop, improve or train generalized or non-personalized AI or machine-learning models.
  • Control. You can revoke access at any time in your PoweAI settings or in your Google Account under Security, then Third-party apps & services.

AI processing

PoweAI uses large language models from third-party AI providers (currently Anthropic (Claude) — confirm) to analyze and generate text. These providers process data on our behalf under contracts that prohibit them from using it to train their models. Your Business Brain is isolated to your business. PoweAI does not use automated processing to make decisions that produce legal or similarly significant effects about individuals. Learn more on our AI Transparency page.

How we share information

  • Service providers and subprocessors that host, process and deliver the Service under contract, listed in our DPA.
  • Connected Services at your direction, for example sending an email through your Gmail account or a text message through our messaging provider.
  • Legal and safety reasons, when required by law or to protect rights, safety and the integrity of the Service.
  • Business transfers, as part of a merger, acquisition or sale of assets, subject to this policy (and, for Google user data, your prior consent).
  • With your consent or at your direction.

We do not sell personal information and do not share it for cross-context behavioral advertising. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent are never shared with any third party, except our messaging providers as needed to deliver messages.

Retention

We keep personal information only as long as needed for the purposes above. Account information is kept while your account is active. Customer Data, including your Business Brain, is deleted within 30 days after you close your account or ask us to delete it. Data from a disconnected Connected Service is deleted within 30 days of disconnection unless you ask us to keep what was already collected. Copies in backups are removed on their normal cycle, within 90 days. Security and audit logs are kept for up to 12 months. We may keep information longer where the law requires.

Security

We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls and audit logging. No system is perfectly secure. See our Security page for details.

Your rights and choices

You can see, fix, export or delete your information, and you can always opt out of messages.

  • Access, correct, delete, export. Request a copy of your personal information, correct it, delete it or receive it in a portable format.
  • Disconnect tools. Remove any Connected Service in settings at any time.
  • Messages. Reply STOP to any text, block or opt out on WhatsApp, or use the unsubscribe link in emails.
  • Global Privacy Control. We honor browser opt-out preference signals such as GPC.
  • No discrimination. We will not treat you differently for exercising your rights.

To make a request, email privacy@poweai.com. We will verify your request, respond within 45 days (or as required by law), and you may use an authorized agent. If we deny your request, you may appeal by replying to our decision. If your appeal is denied, you may contact your state attorney general.

US state privacy rights

Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia have rights under state privacy laws, and more states have laws taking effect soon. Some of these laws apply only above certain thresholds, but we extend the rights described above to all US users.

California. In the past 12 months we collected the categories in the table above (identifiers, commercial information, internet activity, professional information, and the contents of communications you authorize us to access) from the sources listed, for the purposes listed. We do not sell or share personal information, and we use sensitive personal information only as permitted by the CCPA. We do not knowingly collect information from anyone under 16.

Children

PoweAI is a business service and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact privacy@poweai.com and we will delete it.

Where we process data

PoweAI is based in the United States and serves US businesses. We process and store data in the United States. If you access PoweAI from elsewhere, your information will be transferred to the United States.

Changes to this policy

We will post any changes here and update the date above. If we make material changes, we will notify you by email or in the Service before they take effect. We will ask for your consent before using Google user data in a new way.

Contact

Privacy questions or requests: privacy@poweai.com
PoweAI legal entity name
Registered business address, Atlanta, GA