Last updated: March 2026
Information We Collect
We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support. This may include:
- Personal information such as your name and email address
- Account credentials and profile information
- Information obtained through Google OAuth, including your Google profile name, email address, and profile picture
Google OAuth & Gmail Integration
Aevum AI uses Google OAuth 2.0 for user authentication. When you sign in with Google, we request access to the following scopes:
- Email & Profile — To identify you and create your account
- Gmail Send (gmail.send) — To send emails on your behalf through the Gmail API, only when you explicitly initiate an email action within the application
We do not read, modify, or delete any emails in your Gmail account. The gmail.send scope is used exclusively to send new emails as initiated by you. No emails are ever sent automatically — every send is a deliberate, individual action you take.
Google API Services User Data Policy
Aevum AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How We Use Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Authenticate your identity and manage your account
- Send emails on your behalf when you use the email sending feature
- Ensure the security and integrity of our platform
Data Storage & Security
We are committed to protecting your personal information with industry-standard security measures:
- All OAuth tokens (access tokens and refresh tokens) are encrypted at rest using AES-256-GCM encryption before being stored in our database
- Tokens are never stored in plain text
- All data transmission occurs over HTTPS (TLS-encrypted connections)
- We do not sell, trade, or otherwise transfer your personal data or Google user data to third parties
Cookies & Session Data
Aevum AI uses HTTP-only, secure cookies for session management and authentication. These cookies are essential for the service to function and are not used for tracking or advertising purposes.
Data Retention & Deletion
We retain your personal information and OAuth tokens for as long as your account is active or as needed to provide you services. When you delete your account:
- All personal data associated with your account is permanently deleted
- All stored OAuth tokens are revoked and deleted
- You may also revoke Aevum AI's access to your Google account at any time through your Google Account permissions
Your Rights
You have the right to:
- Access and update your personal information
- Request deletion of your personal data
- Revoke Google API access at any time
- Export your data upon request