Privacy Policy

1. Who we are

Sapiant AI (“Sapiant AI”, “we”, “us”). Contact: robert@sapiantai.com.

For the purposes of data-protection law, we act as a controller for information collected through this website, and as a processor for information we handle on behalf of a client under a written agreement.

2. Information we collect

When you visit this website

• Standard server request logs, including IP address, browser type, pages requested and timestamps, kept for security and diagnostics.
• Fonts on this site are served by Google Fonts, which receives the request as part of delivering them.

When you contact us

• Whatever you choose to put in the form or the email — typically your name, email address, company and message.
• We use it to reply to you and to keep a record of the conversation. Nothing more.

When you connect a Google account

Some Sapiant AI software can connect to a Google account so it can work on your mailbox for you. This only happens if you explicitly authorise it through Google’s own consent screen, and it is covered in detail in section 3.

3. Google user data

This section governs any data our applications access through Google APIs. It takes precedence over the general statements above.

What we request

• gmail.modify — to read messages and to organise them by applying, removing and managing labels.
• gmail.labels — to create and maintain the label structure the software uses to organise a mailbox.

What we do with it

• Read the content and metadata of messages in the connected mailbox in order to classify, prioritise and organise them.
• Apply and manage labels so the mailbox is sorted for the account holder.
• Prepare draft replies and summaries for the account holder to review.

Limited Use

Specifically, we do not transfer or use Google user data for serving advertising, we do not sell it, we do not use it to train generalised artificial-intelligence or machine-learning models, and we allow humans to read it only where you have given explicit consent, where it is necessary for security or to comply with law, or where the data has been aggregated and anonymised.

Where it goes

To classify and draft, message content is sent to our AI processor, Anthropic, for processing and returned to us. It is not used by us or by them to train models. Message metadata and working state are stored on systems we control, including Microsoft OneDrive as a storage provider. These providers are listed in section 5.

Revoking access

You can disconnect Sapiant AI from your Google account at any time at myaccount.google.com/permissions. Revoking access stops all further data collection immediately. To have data we already hold deleted, email robert@sapiantai.com and we will delete it within 30 days.

4. Why we are allowed to use it

• Your consent — for any connected Google account, and for marketing email you asked to receive.
• Performance of a contract — to deliver the services a client has engaged us for.
• Legitimate interests — to respond to enquiries, secure our systems and run our business, where those interests are not overridden by your rights.

5. Who we share it with

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We disclose it only to service providers who process it on our instructions:

• Anthropic — AI processing of content for classification, summarisation and drafting.
• Microsoft (OneDrive) — file and working-state storage.
• Google — where you have connected a Google account, and for fonts served on this site.
• Our hosting and email providers — to serve this website and deliver our correspondence.

We may also disclose information where the law requires it, or to protect our rights, safety or property. If our business is ever transferred, we will give notice before information becomes subject to a different policy.

6. How long we keep it

• Enquiries and correspondence — for as long as we have an active relationship, then up to 3 years.
• Connected-mailbox data — only while the connection is active. Revoke access or ask us to delete, and we remove it within 30 days.
• Server logs — typically 90 days.
• Records we must keep — for the period the relevant tax or legal obligation requires.

7. How we protect it

• Encryption in transit for all connections to our services and providers.
• Credentials held in dedicated secret storage, never in the source code of our applications.
• Access limited to the people who need it to deliver the work.
• Capabilities we do not need are not requested — our software is built so that actions we should never take have no code path at all.

No system is perfectly secure, and we do not claim otherwise. If a breach affects your information, we will notify you as required by law.

8. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to obtain a portable copy, to object to or restrict how we use it, and to withdraw consent at any time. Exercising these rights will not cause us to treat you differently.

To make a request, email robert@sapiantai.com. We will respond within the period the applicable law requires, and within 30 days where no other period applies. We may need to verify your identity first.

Where we handle information on behalf of a client, requests are directed to that client and we assist them in responding.

9. Children

Our services are for businesses. They are not directed to children under 13, and we do not knowingly collect their information. If you believe a child has provided us information, email us and we will delete it.

10. International transfers

We operate from the United States, and our providers may process information in the United States and elsewhere. Where information is transferred out of a jurisdiction with transfer restrictions, we rely on appropriate safeguards, including standard contractual clauses where they apply.

11. Changes to this policy

We will update this page when our practices change and revise the effective date at the top. Material changes affecting how we handle Google user data will be notified to affected users before they take effect.