Skip to content

Privacy Policy

Last updated: [KARAR GEREKLİ: publication date]

1. Who and what this policy covers

Chatopya is a product of Retmind Teknoloji (Cevizli Mah. Ulubey Sok. No:4/A Nursanlar Kartal Plaza A Blok D:48, Kartal, Istanbul, Türkiye). This page explains how we handle Google user data when you connect your Google account or Google Workspace mailbox to Chatopya. Connecting is optional; Chatopya does not access your mailbox unless you connect it.

For the agreements and notices covering Chatopya's other services (WhatsApp, Instagram and other channels), see the Privacy Agreement and KVKK pages.

2. Google user data we access

When you connect your Gmail or Google Workspace mailbox by granting consent on Google's OAuth screen, we access:

  • Emails in your mailbox: headers (subject, date, message identifiers), message body, attachments, and sender and recipient email addresses.
  • Your Google account profile: your email address and name.

We request only the permissions these features need: reading email and sending email.

3. How we use this data

We use Google user data only to provide the user-facing features you expect when you connect your mailbox:

  • Show emails received in your mailbox on Chatopya's Conversations screen.
  • Send reply and notification emails on your behalf from the mailbox you connected.
  • Match the sender addresses of emails to customer cards in Chatopya.
  • [KARAR GEREKLİ: will AI-assisted reply suggestions ship with this feature? If so, keep this sentence: "If you enable it, Chatopya suggests a draft reply only for a conversation in your own mailbox; nothing is sent until you approve it." If not, delete this item.]

We do not use Google user data for anything outside these purposes, such as advertising, profiling, or features aimed at our other customers.

4. Google API Services User Data Policy (Limited Use)

Chatopya's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

5. Our commitments

  • We do not use Google user data to serve ads, including personalized, retargeted or interest-based advertising.
  • We do not sell Google user data and do not transfer it to data brokers or similar third parties.
  • Humans do not read your data, except: (a) where you give explicit consent for us to read specific messages, (b) where necessary to investigate a security incident or abuse, or (c) where required by law.
  • We do not use your Gmail data to train general-purpose AI or machine-learning models.

6. Storage and security

  • The access token (refresh token) Google issues for your mailbox is stored encrypted with AES-256-GCM.
  • Retention period: [KARAR GEREKLİ: how long email content is kept in Chatopya]
  • Infrastructure and subprocessors: [KARAR GEREKLİ: where the data is hosted; whether third-party services (e.g. AI providers) process it, and which]

7. Disconnecting and deletion

  • You can disconnect your mailbox at any time from within Chatopya. You can also revoke Chatopya's access at Google Account → Security → Third-party apps with account access.
  • What happens to email data on disconnect: [KARAR GEREKLİ: whether email content stored in Chatopya and the access token are deleted when you disconnect, and when]
  • Data deletion requests: you can ask us to delete your email data in Chatopya by writing to [KARAR GEREKLİ: contact email address (suggestion: [email protected])] or through our contact page. Response time: [KARAR GEREKLİ: response/deletion time].

8. Changes

When we update this policy we change the date at the top of the page. If the purpose for which we use Google user data changes materially, we will ask for your consent again.