Mnexa AI

Privacy Policy

Last updated: February 17, 2026

Mnexa AI ("Mnexa," "we," "us," or "our") provides an AI-powered productivity platform that helps users orchestrate workflows across email, calendar, and other productivity tools. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services.

By using Mnexa AI, you agree to the practices described in this policy. If you do not agree, please do not use our services.

1. Information We Collect

Account Information

When you sign in with Google, we receive your name, email address, and Google account identifier. We use this to create and authenticate your Mnexa account.

OAuth Tokens

To access your Google Workspace services (Gmail, Calendar, Drive, Contacts) on your behalf, we store OAuth refresh and access tokens. These tokens are stored encrypted at rest in our database and are only used to perform actions you explicitly request.

Email and Calendar Data

When you use Mnexa to process emails or calendar events, we temporarily access the content of those items through the Google API. This data is processed in memory to generate suggestions and execute workflows. We do not permanently store the full content of your emails or calendar events.

Execution Data

When workflows run, we store execution metadata (status, timestamps, pipeline name) and temporary execution details for debugging purposes. Execution details — including any email content processed during a workflow — are automatically purged after 7 days. Only metadata (status and timestamps) is retained beyond that period.

2. How We Use Your Information

We use your information to:

  • Authenticate you and maintain your account
  • Execute workflows you request (sending emails, creating calendar events, drafting replies)
  • Generate AI-powered suggestions based on your context
  • Debug and improve our service
  • Communicate with you about your account or our services

We do not sell your personal information. We do not use your email content, calendar data, or other Google Workspace data for advertising purposes.

3. Data Storage and Security

Your data is stored on Google Cloud Platform (GCP) infrastructure in the United States. We employ the following security measures:

  • Encryption at rest: All database storage is encrypted using Google-managed encryption keys via Cloud SQL
  • Encryption in transit: All connections use TLS/HTTPS
  • Access controls: Database access is restricted to authorized application service accounts
  • Automatic data retention: Execution data containing email or document content is automatically purged after 7 days

4. Data Retention

  • Account data (name, email) is retained for as long as your account is active
  • OAuth tokens are retained until you disconnect the integration or delete your account
  • Execution details (workflow state, email content processed during workflows) are automatically deleted after 7 days
  • Execution metadata (status, timestamps) is retained for service analytics and debugging

5. Third-Party Services

Mnexa AI integrates with the following third-party services to provide its functionality:

  • Google Workspace APIs (Gmail, Calendar, Drive, Contacts) — to read and act on your productivity data at your request
  • Google Cloud Platform — for infrastructure, database hosting, and encryption
  • Google Gemini — for AI-powered content generation and workflow suggestions

We only share the minimum data necessary with these services to perform the actions you request. We do not share your data with any other third parties.

6. Google API Services User Data Policy

Mnexa AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we limit our use of Google user data to providing and improving user-facing features that are visible to you. We do not use Google user data for serving advertisements or for any purpose unrelated to the core functionality of Mnexa AI.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Delete your account and all associated data
  • Revoke Google OAuth permissions at any time through your Google Account settings
  • Export your data upon request

To exercise any of these rights, contact us at [email protected].

8. Children's Privacy

Mnexa AI is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Your continued use of Mnexa AI after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:
[email protected]