Privacy Policy
Last updated: June 30, 2026
This Privacy Policy explains how LINDA ("LINDA," "we," "us," or "our") collects, uses, stores, shares, and protects information when you use our call- and email-intelligence service (the "Service"), available at lindaai.net. It includes our specific disclosures for Google user data, in compliance with the Google API Services User Data Policy, including the Limited Use requirements.
1. Who we are
LINDA is a software service that helps sales and support teams understand their customer conversations. With your authorization, LINDA connects to your communication tools — including recorded calls, uploaded transcripts, and connected email mailboxes (Gmail and Microsoft Outlook) — and turns those interactions into summaries, coaching insights, action items, and suggested follow-ups.
2. Information we collect
2.1 Information you provide
- Account & profile data: name, work email, organization, and authentication identifiers used to create and secure your account.
- Content you upload: call recordings, transcripts, and notes you choose to add to the Service.
2.2 Information from connected accounts (Google & Microsoft)
When you connect a mailbox, you grant LINDA access to the data described in Section 4. We access this data only to provide the Service's user-facing features.
2.3 Information collected automatically
- Usage & device data: log data, IP address, browser type, and feature interactions, used to operate, secure, and improve the Service.
3. How we use information
We use the information we collect to:
- Provide the core Service: analyze your connected interactions and generate summaries, sentiment, action items, coaching insights, and suggested follow-up messages.
- Send follow-up emails and create calendar events at your direction.
- Authenticate you, secure your account, and prevent abuse.
- Operate, maintain, debug, and improve the Service.
- Comply with legal obligations.
4. Google user data & Limited Use
LINDA's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4.1 What Google data we access, and why
| Scope | Access | Why we need it |
|---|---|---|
gmail.readonly |
Read-only | Read the messages in your connected mailbox — sender and recipients, subject, body text, and attachments — so the Service can analyze each email conversation and produce summaries, sentiment, action items, and coaching insights. We do not modify or delete your mail. |
gmail.send |
Send only | Send a follow-up email only when you compose or approve it in LINDA. We do not send mail on your behalf automatically. |
calendar.events |
Events | Read and create calendar events tied to follow-ups you schedule from a conversation (e.g., booking a next call). |
contacts.readonly |
Read-only | Match the people in a conversation to the right customer record, so insights are attributed to the correct contact. |
4.2 The Limited Use commitments
We use Google user data only to provide and improve the user-facing features described above. Specifically:
• We do not sell your Google user data.
• We do not use your Google user data for advertising.
• We do not use your Google user data to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models.
• We do not transfer your Google user data to others, except as necessary to provide or improve the Service, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
• We do not allow humans to read your Google user data, except: with your affirmative agreement for specific messages; as necessary for security purposes (e.g., investigating abuse) or to comply with applicable law; or where the data has been aggregated and anonymized.
4.3 How AI processing works
LINDA generates its insights using the Anthropic Claude API. The relevant content of an interaction is sent to Anthropic's API solely to produce the analysis you see in the product. Under Anthropic's commercial terms, Anthropic does not train its models on customer content submitted through its API. Your Google user data is therefore not used to train Anthropic's models, and it is not used to train any model of LINDA's either.
5. How we share information
We do not sell personal information. We share information only with:
- Service providers (subprocessors) that operate the Service under contract, listed in Section 6.
- Your own organization — insights derived from connected accounts are available to authorized members of your LINDA workspace.
- Legal & safety — when required by law or to protect rights, safety, and the integrity of the Service.
6. Subprocessors
| Provider | Purpose |
|---|---|
| Anthropic | AI analysis (Claude API). Does not train on submitted content. |
| Fly.io | Application hosting and database infrastructure. |
| Amazon Web Services (S3) | Encrypted storage of email attachments. |
7. Data security
- In transit: all data is encrypted in transit using TLS.
- At rest: OAuth access and refresh tokens for your connected accounts are encrypted at rest before storage (authenticated symmetric encryption — AES with an HMAC integrity check). Stored email attachments are encrypted at rest in object storage (server-side AES-256).
- Access controls: human access to your data is restricted as described in Section 4.2.
8. Data retention & deletion
We retain information for as long as your account is active or as needed to provide the Service.
8.1 Disconnecting a mailbox
When you disconnect a connected account (revoke access) in LINDA, we:
- revoke the authorization with the provider so the token can no longer be used;
- delete the stored access and refresh tokens; and
- purge the email interactions we ingested from that mailbox, including their stored attachments.
8.2 Deleting your account
When your organization's account is deleted, we delete the data associated with it, including connected-account data, ingested interactions, and attachments.
You may also revoke LINDA's access at any time directly from your Google Account permissions page.
9. Your rights & choices (GDPR & others)
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. We support data export and right-to-deletion. To exercise these rights, contact us at the address below. We act as a data processor for the connected-account content you bring into the Service on behalf of your organization (the data controller).
10. Children's privacy
The Service is intended for business use and is not directed to children under 16. We do not knowingly collect their personal data.
11. Changes to this policy
We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice.
12. Contact us
For privacy questions or to exercise your data rights, contact us at privacy@lindaai.net. For general support, contact support@lindaai.net.