Privacy Policy

With your explicit consent, our application may access information through Google Workspace APIs, including:

• Gmail: reading, sending, and managing email messages.

• Google Drive: creating, reading, updating, and organizing files and folders.

• Google Docs, Sheets, and Slides: creating, reading, and updating documents, spreadsheets, and presentations.

• Google Calendar: creating and managing calendar events.

• Google Contacts: accessing, creating, and updating contact information.

• Google Meet: managing meeting information and integrating with scheduled events.

• Google Sites: creating and updating internal Sites pages when used for onboarding or documentation.

• Google Workspace Admin SDK (Directory API): creating and managing user accounts, groups, and organizational data (when authorized by a Workspace administrator).

• Google Account Information: name, email address, and unique account identifiers.

We only collect the data necessary to provide automation and AI assistant functionality.

We process personal data exclusively to:

• Automate onboarding and administrative workflows (e.g., creating accounts, setting up folders, generating documents).

• Facilitate collaboration through Docs, Sheets, Slides, and Sites.

• Assist communication and scheduling using Gmail, Contacts, Calendar, and Meet.

• Manage Workspace users, groups, and directories for organizations.

• Provide secure authentication and ensure proper use of the AI assistant.

We do not sell or use personal data for advertising. 

• LGPD (Brazil): Consent of the data subject (Art. 7, I), execution of contracts (Art. 7, V), and legitimate interest (Art. 7, IX).

• GDPR (EU/EEA): Consent (Art. 6(1)(a)), contractual necessity (Art. 6(1)(b)), and legitimate interests (Art. 6(1)(f)).

• CCPA (California, USA): Users have rights to access, deletion, and transparency. We do not sell personal information.

• We do not share personal data with third parties for commercial purposes.

• Data may be processed by secure service providers (such as cloud infrastructure).

• Disclosure may occur only if legally required (e.g., regulatory or court order).

• Data is retained only for as long as needed to fulfill the automation purposes.

• Gmail messages, Drive files, and Calendar events are not permanently stored unless required by your workflows.

• Workspace Directory data (users, groups) is managed only within the authorized domain.

• You may request deletion of your personal data at any time.

Under LGPD (Brazil)

• Confirm processing, access, correct, delete, or transfer data.

• Revoke consent at any time.

Under GDPR (EU/EEA)

• Access, correct, delete, restrict processing, portability, object to processing, and withdraw consent.

Under CCPA (California, USA)

• Know what data is collected and how it is used.

• Request access or deletion.

• Opt out of data sale (we do not sell data).

• To exercise rights, contact: support@altamid.com.br

We use technical and organizational safeguards, including:

• Encryption in transit and at rest.

• Authentication and access control.

• Monitoring against unauthorized access or misuse.

Data may be transferred internationally (e.g., between Brazil, the US, and Europe).
For EU/EEA users, transfers are protected using safeguards such as Standard Contractual Clauses (SCCs).

When authorized by a Workspace administrator, we may access the Admin SDK to:

• Create and manage user accounts and groups.

• Assign organizational units and directory attributes.

This is used exclusively for onboarding and account provisioning automation.

Our services are not directed at individuals under 16 years of age. We do not knowingly collect data from children.

We may update this Privacy Policy periodically. Updates will be posted with a new “Last Updated” date.

For questions or to exercise rights:

• Email: support@altamid.com.br