Privacy Policy

Executive AI is a productivity service that helps you plan your day, triage your inbox, prepare for meetings and keep track of your work. To do that it needs access to some of your information. This policy explains what we collect, why, where it goes and what control you have over it.

This policy covers the Executive AI web application at executiveai.co.in and the service behind it.

We collect the following categories of information.

• Account information. Your email address, your name and your profile image, together with an account identifier, supplied by our authentication provider when you sign up or sign in.
• Workspace information. The name of your workspace and your role within it.
• Preferences. Your timezone, locale, interface theme and working hours.
• Content you create. Tasks, meetings, notes, knowledge entries and the commands you give Executive AI.
• Information from services you connect. Described in sections 3 to 5.
• Billing records. Described in section 9.
• Operational records. Server logs recording the time, method and path of requests, their outcome and how long they took, together with an internal record of significant actions taken in your workspace. Request logs deliberately exclude query strings.

If you choose to connect your Google account, Executive AI asks Google for the following permissions and no others:

• openid and userinfo.email — to identify the Google account you connected and record its email address.
• calendar.readonly — read-only access to your Google Calendar.
• gmail.readonly — read-only access to your Gmail messages.

These permissions are read-only. Executive AI cannot create, change or delete calendar events, and it cannot send, save or modify email in your Gmail account.

We request offline access so that Executive AI can refresh your data in the background without asking you to sign in to Google each time.

When you connect Google, Executive AI reads information from your calendar and inbox and stores a copy of it in our database so that it can be displayed to you and used by the assistant. Specifically:

• Calendar: event titles, descriptions, locations, start and end times, all-day flags and attendee details.
• Gmail: sender name and address, subject, a short preview, the message body, labels and the time the message was received.

We use this information to show you your schedule and inbox, to detect scheduling conflicts, to identify messages that may need your attention, to plan focus time and to produce drafts and summaries you request.

This stored Google-derived information is erased when you delete your account, as described in section 15. Information sent to our AI provider while answering your requests is covered by section 7.

Executive AI’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you complete the Google consent screen, Google issues Executive AI an access token and a refresh token. We store both, together with the connected account’s email address and the permissions granted.

Both tokens are encrypted before they are written to our database using symmetric encryption, and are decrypted only when a request to Google needs to be made on your behalf. We never display your tokens in the application and we do not include them in our logs.

These stored credentials are deleted when you disconnect Google (section 14) and when you delete your account (section 15).

Executive AI can also read from Slack, Notion and GitHub. These are configured once for an entire workspace by an administrator using credentials issued by those services, rather than by each person individually. Where configured, Executive AI can read recent channel messages, search pages, and read issues and pull requests, in each case only what the supplied credential permits.

These services are operated by their respective providers and remain subject to their own terms and privacy policies. Executive AI is not affiliated with, endorsed by or operated by any of them.

Executive AI uses a third-party artificial intelligence provider (currently OpenAI) to generate plans, summaries, prioritisations and suggested replies.

To answer a command, Executive AI sends the provider the instruction you typed together with relevant context assembled from your workspace. That context can include information derived from your tasks, calendar events, email messages and any other services you have connected. Your Google-derived information may therefore be transmitted to this provider as part of fulfilling your request.

The Executive AI project does not opt into optional OpenAI API data sharing for model training, subject to the applicable OpenAI API terms. OpenAI processes the information we send in order to return a response, and may retain it for its own limited operational purposes such as abuse monitoring under those terms. We do not claim that your information is never retained or never processed by OpenAI, and we do not make claims about OpenAI’s systems beyond the setting we control.

Executive AI keeps a “memory” of context you provide or that it derives while assisting you, so that it can personalise later responses. Each memory entry stores the text itself, a numerical representation of that text used for search, a note of where it came from and an importance rating.

Memory entries are scoped to your account and workspace and are not shared with other customers.

• To provide, operate and maintain the service.
• To authenticate you and keep your account secure.
• To generate the plans, summaries, prioritisations and drafts you ask Executive AI for.
• To process subscription payments and maintain billing records.
• To diagnose faults, monitor reliability and improve the service.
• To communicate with you about your account or the service.

We do not sell your personal information. We do not share it with third parties for their own advertising.

We do share information with the service providers that operate Executive AI on our behalf. These are:

• Authentication provider (Clerk) — account creation, sign-in and session management.
• AI provider (OpenAI) — generating the outputs described in section 6.
• Payment provider (Razorpay) — processing subscription payments.
• Hosting and infrastructure providers — running our application, database and cache, and serving the website.
• Error monitoring — where enabled, diagnostic reports about faults, which may incidentally contain limited technical context.

We may also disclose information where we are required to do so by law, or to establish, exercise or defend legal claims.

Subscription payments are processed by Razorpay. When you upgrade, your payment details are entered into Razorpay’s own checkout, which runs on Razorpay’s systems rather than ours.

Paid plans are recurring subscriptions. Razorpay holds the mandate that allows it to charge you each month, and you can cancel from your billing page at any time; cancelling stops future charges and your access continues until the end of the period you have already paid for.

Executive AI does not receive or store your card number, expiry date or security code. We retain only a record of the transaction: our own transaction reference, the payment and subscription references returned by Razorpay, the plan, the amount, the currency, the outcome and, where a payment fails, the reason reported to us.

Payment records are retained after an account is deleted, as described in section 12. They contain no card details.

Your information is stored in a managed PostgreSQL database and supporting infrastructure operated by our hosting providers.

Executive AI does not currently operate an automated retention or deletion schedule. Information you create, and information synchronised from services you have connected, is retained until you delete your account (section 15), disconnect the service that supplied it, or ask us to remove it.

What is deliberately retained after an account is deleted. The following categories are not erased, because they serve purposes that outlive the account:

• Payment records — our transaction reference, the reference returned by our payment provider, the plan, the amount, the currency and the outcome. Retained for accounting, tax, fraud prevention and dispute handling. These contain no card details.
• Subscription records — the plan and its status, retained for the same reasons.
• Audit and security records — a log of significant actions taken in a workspace, retained as a security record.
• The anonymised user record described in section 15, retained so the records above keep their referential integrity.

These records are kept for as long as is reasonably necessary for the purposes above and for any applicable legal, accounting or regulatory obligation. We do not state a fixed period, because the period that applies depends on the obligation in question.

The measures currently implemented include:

• Encryption in transit over HTTPS.
• Encryption of stored third-party OAuth tokens before they are written to the database.
• Authentication of every request to our API using signed tokens verified against our authentication provider.
• Verification of the authenticity of incoming provider webhooks.
• Exclusion of credentials and query strings from application logs.

No service can guarantee absolute security. We do not claim any security certification or formal compliance accreditation.

You can disconnect Google at any time from the Integrations page in your dashboard. Doing so deletes the stored access and refresh tokens, and Executive AI stops reading from your Google account.

You can also revoke Executive AI’s access directly from your Google Account’s security settings.

Disconnecting removes Executive AI’s stored credentials, which stops Executive AI from reading your Google account. It does not, by itself, withdraw the authorisation recorded in your Google Account — Executive AI does not currently call Google’s token revocation endpoint. You can remove that authorisation yourself at any time from your Google Account’s security settings.

Disconnecting also does not by itself delete calendar events or email messages already synchronised into your Executive AI workspace. To have that information removed, either delete your account (section 15) or contact us using section 16.

You can delete your account from Settings → Account → Delete account in your dashboard. Deletion is permanent and cannot be undone, so the flow asks you to confirm deliberately before it proceeds.

Deleting your account erases the records Executive AI holds for you, including:

• Your Google connection, including the stored encrypted access and refresh tokens
• Email messages and calendar events synchronised into Executive AI
• Your tasks, meetings and memory entries
• Your preferences, sessions, any API keys and your workspace memberships

Your Executive AI user record itself is anonymised and deactivated rather than physically removed. The fields that identify you — your name, email address, profile image and account identifier — are overwritten, and the account can no longer be signed in to. The row is kept because the records described in section 12 refer to it and would otherwise lose their integrity.

If your account is deleted through our authentication provider instead, the same erasure runs.

Shared workspaces. If you belong to a workspace with other members, that workspace and the information belonging to its other members are not deleted, and the workspace is not renamed. Deleting your account removes your own records and your access to that workspace. A workspace left with no members at all is retained only as the parent of the records in section 12, with its identifying details removed.

Executive AI processes account deletion requests through the account deletion flow above. Certain records may be retained where required for legal, accounting, security, fraud-prevention or other legitimate purposes, as described in section 12. Deletion is carried out as part of the request itself rather than queued for later processing; we do not commit to a separate service-level window.

If you would prefer us to action a deletion or erasure request on your behalf, contact us using the details in section 16.

Our authentication provider sets cookies that are necessary to sign you in and keep you signed in. Without them the application cannot function.

Executive AI itself stores one item in your browser’s local storage: your chosen interface theme. It contains no personal information and is never transmitted to us.

Executive AI does not use advertising cookies, and no third-party analytics or tracking scripts are included in the application.

Executive AI is operated from India. The service providers listed in section 8 operate globally, and information may be processed and stored in countries other than your own and other than India. We do not list specific hosting regions here, because those are determined by each provider’s configuration and can change. By using Executive AI you acknowledge that your information may be processed outside your country of residence.

Executive AI is intended for users aged 18 or older. It is a business productivity service and is not directed to children. We do not knowingly collect information from anyone under 18; if you believe a child has provided us with information, contact us using section 21 and we will remove it.

You can:

• Access and correct your profile and preferences within the application.
• Disconnect any connected service at any time.
• Cancel your subscription from the Billing page.
• Request a copy of, correction of, or erasure of your information by contacting us.

Depending on where you live and the law that applies to you, you may have further rights — for example to access the information we hold about you, to have it corrected or deleted, to withdraw consent where processing relies on it, to object to or restrict certain processing, and to complain to a data protection authority. To exercise any of these, contact us using section 21.

We describe our actual practices here rather than asserting compliance with any particular framework, and we make no claim of certification under any data protection regime.

We may update this policy as the service changes. When we do, we will revise the “last updated” date at the top of this page. Material changes will be communicated to account holders.

Questions about this policy, or a request concerning your information:

• Email: utkarsh410@gmail.com
• Operator: Executive AI is operated by Utkarsh Chaudhari as an individual, from India. Executive AI is not incorporated as a company, and no company registration or registered office applies.

We currently handle privacy enquiries by email and do not publish a postal address.