Privacy Policy

KODA is an email and calendar execution workspace available at koda.shubhamdalvi.in. For privacy questions, account deletion, or data requests, contact shubham13developer@gmail.com.

When you sign in with Google, KODA receives your Google account profile information such as your name, email address, and user identifier.

If you grant access, KODA may process Gmail and Google Calendar data needed to provide the product, including message metadata, message snippets or body content, recipients, labels, threads, calendar event titles, event times, attendees, and related scheduling details.

KODA stores OAuth tokens and refresh tokens so it can keep your workspace synchronized after you sign in. KODA also stores derived workspace data, such as commitments, follow-ups, deadlines, drafts, action history, and sync status.

KODA uses Vercel Analytics to understand basic site usage. This may include page views, device/browser information, referrers, and approximate region data.

KODA uses your information to:

• Authenticate your account and maintain your session.
• Display, search, and summarize relevant Gmail threads.
• Extract commitments, deadlines, owners, and follow-up actions from email context.
• Display, create, update, or delete Google Calendar events when you request those actions.
• Draft or send Gmail messages only when you request or confirm those actions.
• Maintain security, debugging, abuse prevention, and logs.

KODA uses Google user data only to provide and improve user-facing email, calendar, scheduling, drafting, search, and commitment-tracking features.

KODA does not sell Google user data. KODA does not use Google user data for advertising. KODA does not allow humans to read your Google user data unless you ask for support, it is needed for security or abuse investigation, or it is required by law.

KODA may send the minimum relevant Gmail or Calendar context to infrastructure and AI service providers solely to operate the requested product features, such as extracting commitments, drafting replies, or answering your workspace questions. KODA does not use Google user data to train generalized AI models.

KODA's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

KODA shares data with service providers only as needed to run the application. These providers may include hosting, analytics, database, authentication, email/calendar integration, and AI-processing infrastructure.

KODA may disclose information if required by law, to protect the rights and security of users or the service, or as part of a business transfer where privacy commitments continue to apply.

KODA keeps account, token, email, calendar, and derived workspace data for as long as needed to provide the service, maintain security, comply with legal obligations, and resolve disputes.

You can revoke KODA's Google access at any time from your Google Account permissions page. You may also request account deletion or deletion of stored KODA data by contacting shubham13developer@gmail.com.

KODA uses reasonable technical and organizational safeguards to protect account data, OAuth tokens, and workspace data. No internet service can guarantee absolute security.

KODA may update this Privacy Policy as the service changes. The updated policy will be posted on this page with a new effective date.