Your customer data should work for you, not against you.

We collect information in the following categories:

• Account information: your name, email address, organization, role, and authentication details.
• Customer content: contacts, account records, opportunities, notes, tasks, files, and other information you add to the Services.
• Usage and device data: browser type, device information, IP address, pages viewed, feature interactions, timestamps, and diagnostic logs.
• Communications: messages you send to our support or sales teams and feedback you choose to provide.

If you connect a Google account, we access Google user data only after you provide explicit OAuth consent. Depending on the features you authorize, this may include:

• Basic profile information such as your name, email address, and profile image to identify and secure your account.
• Gmail data such as message content, participants, subject lines, timestamps, labels, and thread metadata to associate communications with CRM records, summarize conversations, and suggest follow-up actions.
• Google Calendar data such as event titles, descriptions, attendees, times, locations, and meeting links to show customer meetings, prepare context, and help manage follow-up work.

Mermaids will not send an email, create or modify a calendar event, or take another external action unless you direct the action or enable a clearly described automation.

We use information to provide, maintain, secure, and improve the Services, including to:

• organize customer relationships, communications, meetings, tasks, and sales activity;
• generate summaries, suggestions, reminders, and other AI-assisted outputs requested through the Services;
• authenticate users, prevent abuse, troubleshoot errors, and protect the Services;
• communicate about product updates, support requests, security, and administrative matters; and
• comply with law and enforce our agreements.

We do not use Google user data to train general-purpose AI or machine-learning models. We do not sell personal information or Google user data.

We may use vetted infrastructure, hosting, security, analytics, support, and AI service providers to process information on our behalf. They may access information only as needed to perform contracted services and are subject to confidentiality and data-protection obligations.

AI-generated summaries and suggestions may be incomplete or inaccurate. You should review outputs before relying on them or taking action.

We may share information with service providers, within your organization as configured by your administrators, in connection with a corporate transaction, or when required to comply with law and protect rights and safety.

We do not share Google user data for advertising, credit-worthiness, lending, or sale to data brokers. We do not allow humans to read Google user data except with your affirmative agreement for support or security, when necessary to comply with law, or when the data has been aggregated and anonymized for internal operations.

We retain information only for as long as reasonably necessary to provide the Services, satisfy legitimate business and legal requirements, resolve disputes, and enforce agreements. Retention periods vary by data type and account configuration.

You may disconnect Google integrations within the Services or revoke Mermaids' access through your Google Account permissions. You may request deletion of your account and associated personal data by contacting us. We will delete or de-identify eligible data from active systems within a reasonable period, subject to legal obligations and limited backup retention.

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption in transit, monitoring, and least-privilege practices. No system is completely secure, and we cannot guarantee absolute security.

Information may be processed in countries other than where you live. Where required, we use appropriate safeguards for international transfers.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of your personal information. You may also withdraw consent or appeal a decision regarding a privacy request.

You can manage integration access, notification preferences, and certain account information in the Services. We may need to verify your identity before completing a request.

The Services are not directed to children under 13, and we do not knowingly collect their personal information. We may update this policy as our Services or legal obligations change. We will post the revised version and update the effective date.

Questions or privacy requests can be sent to privacy@mermaids.ai.