Privacy Policy
This policy covers MultiAccount Pilot, the unified comms hub in AutoSolutions OS, operated by AutoSolutions. Last updated: 27 August 2026.
1. What this application does
MultiAccount Pilot connects your Gmail, Google Calendar, Google Tasks, Slack and Monday.com accounts into a single dashboard. It displays your mail, meetings and tasks together, produces short summaries and daily briefs, and can prepare draft replies and tasks at your request. Drafts can be saved in your own mailbox, and replies can be sent from your connected account from inside the app. Before any message is sent you are shown the sending account, recipients, subject and the full body, and you can edit it; nothing is ever sent until you explicitly approve it and press Send. The app never sends messages automatically.
2. Google scopes we request and why
https://www.googleapis.com/auth/gmail.readonlyRead the messages in your mailbox so the hub can display them and generate summaries and daily briefs.https://www.googleapis.com/auth/gmail.modifyCreate AI-assisted drafts in your own mailbox, and send replies from your account. Every message is shown to you in full — sending account, recipients, subject and body — and is sent only when you explicitly review, approve and press Send. The app never sends anything automatically or on your behalf without that approval.https://www.googleapis.com/auth/calendarRead your calendars so meetings can be shown alongside your mail and tasks.https://www.googleapis.com/auth/calendar.eventsCreate and update calendar events when you ask the app to schedule or change something.https://www.googleapis.com/auth/tasksRead and manage your Google Tasks lists so follow-ups can be shown, completed and created from the hub.https://www.googleapis.com/auth/userinfo.emailIdentify the signed-in user and match the connected account to the right workspace member.https://www.googleapis.com/auth/userinfo.profileShow your name and profile picture in the app so it is clear which account is connected.
We request only the scopes needed for the features described above, and we use the data obtained through them only to provide and improve those user-facing features.
3. How your data is accessed
Access is granted by you through Google OAuth. The OAuth connection and API calls are handled by our integration provider, Composio, which stores the OAuth tokens and relays requests to Google on our behalf. We do not ask for or store your Google password.
4. How your data is used
Message metadata and content, calendar events and tasks are used to render your dashboard, power search inside the app, and generate summaries, daily briefs and suggested drafts. Drafts and sends happen only in response to your action.
AI processing. Email and task content may be sent to third-party AI models (large language models) to produce in-app summaries, briefs and draft text. This processing is performed under agreements that prohibit the provider from using your content to train their generalised models, and we do not use your Google user data to develop, improve or train generalised AI or machine learning models. AI processing happens only to deliver the features you use in the app.
5. How your data is stored and retained
Application data — including cached message summaries, tasks, briefs and any files you upload — is stored in our Supabase (PostgreSQL and object storage) infrastructure, isolated per company and protected by row-level security so only members of your workspace can read it. OAuth credentials are held by Composio. Data is retained while your account and connection are active, and deleted when you disconnect the source, delete the workspace, or request deletion.
6. How your data is shared
We do not sell your Google user data, we do not use it for advertising or ad personalisation, and we do not transfer it to third parties except to the service providers required to operate the product (Composio for OAuth and API access, Supabase for hosting and storage, and AI model providers for the summarisation features described above), or where required by law.
7. Human access
Our staff do not read your Google user data. The only exceptions are: with your explicit consent (for example when you ask us to investigate a problem); where necessary for security purposes such as investigating abuse or a suspected breach; where necessary to comply with applicable law; or where the data has been aggregated and anonymised for internal operations.
8. Limited Use commitment
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
9. Revoking access and deleting your data
You can disconnect any Google account at any time from the Sources page in the app, which removes the stored connection. You can also revoke our access directly at myaccount.google.com/permissions. To request deletion of the data we hold about you, email didac@frankbody.com and we will delete it, along with any cached Google user data, within 30 days.
10. Contact
Questions about this policy or your data: didac@frankbody.com.