Legal

Privacy Policy

Effective August 15, 2026 · Kesh Assist, operated by Kesh Technologies Inc.

The short version: Kesh reads your Google Calendar and Gmail, through Google's own OAuth screen, to generate briefings, drafts, and scheduling suggestions. It never sees your Google password. It never sends an email or accepts a meeting change without your approval by text. Your data isn't sold, and it isn't used to train models on your personal information. You can revoke access at any time from your Google account settings.

On this page

  1. 1. Information we collect
  2. 2. How we use your information
  3. 3. Google user data & limited use
  4. 4. How we share information
  5. 5. Security
  6. 6. Data retention
  7. 7. Your rights & choices
  8. 8. Children's privacy
  9. 9. Changes to this policy
  10. 10. Contact us

1. Information we collect

We collect information in three ways:

Account information

When you join the waitlist or create a Kesh account, we collect your name, email address, phone number (to text you), and billing information once you're subscribed.

Google account data

Once you connect your Google account, and only with your explicit OAuth consent, we access:

  • Google Calendar: events, attendees, times, and locations, so Kesh can sort out scheduling requests and prepare your daily briefing.
  • Gmail: message content and metadata needed to draft replies, flag messages that need your attention, and prepare notes before your meetings.

We request the minimum scopes needed for these features. You can review the exact permissions on Google's consent screen before accepting.

Usage information

We collect basic technical data — device type, general location from IP address, and how you interact with our texts and website — to keep the service reliable and improve it.

2. How we use your information

We use the information above to:

  • Generate your daily briefings, meeting prep notes, and email drafts
  • Triage scheduling requests against your calendar
  • Send you texts requiring approval before any action is taken on your behalf
  • Track commitments you've made, so we can remind you before deadlines
  • Process billing and respond to support requests
  • Maintain, secure, and improve the Kesh service

We do not use your Google Calendar or Gmail content for advertising, and we do not build advertising profiles from it.

3. Google user data & limited use

Kesh's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In practice, this means:

  • We only use Google user data to provide or improve the user-facing features you've explicitly requested — not for anything else.
  • We do not use Google user data for serving advertisements.
  • We do not allow humans to read Google user data unless we have your affirmative consent, it's needed for security purposes, to comply with the law, or the data has been aggregated and anonymized.
  • We do not transfer Google user data to third parties except as needed to provide the Kesh service itself (see Section 4), to comply with the law, or as part of a merger or acquisition, subject to the same commitments in this policy.

4. How we share information

We do not sell your personal data or your Google account data. We share information only with:

  • Service providers who host our infrastructure, send text messages on our behalf, process payments, and power the AI models that draft your briefings and replies — each bound by contract to use your data only to provide these services to us.
  • Legal authorities, if required to comply with a valid legal process, and only after exhausting other options where legally possible.
  • A successor entity, if Kesh is involved in a merger, acquisition, or asset sale, subject to the commitments in this policy carrying forward.

5. Security

We access your Google account exclusively through OAuth — we never ask for or store your Google password. Calendar and email data is encrypted in transit and at rest. Access to production systems that touch your data is restricted to a small number of team members and logged.

No system is perfectly secure, and we can't guarantee absolute security. If we become aware of a breach affecting your data, we'll notify you as required by applicable law.

6. Data retention

We retain your Google Calendar and Gmail data only as long as needed to provide the service — generally, recent data needed to generate upcoming briefings, drafts, and meeting prep notes. When you disconnect your Google account or close your Kesh account, we delete this data from active systems within 30 days, except where we're required to retain it for legal or billing purposes.

7. Your rights & choices

  • Revoke access: disconnect Kesh at any time from your Google account's third-party access settings — this immediately stops our access to new data.
  • Access & deletion: email hello@keshassist.com to request a copy of your data or ask us to delete it.
  • Correction: you can update your account and billing information at any time by texting Kesh or emailing us.
  • Marketing texts: operational texts (briefings, drafts, approvals) are core to the service; you can opt out of any non-essential marketing messages at any time.

Depending on where you live, you may have additional rights under laws like the CCPA or GDPR. Contact us and we'll help.

8. Children's privacy

Kesh is not directed to, and we do not knowingly collect information from, anyone under 18. If you believe a minor has provided us with personal information, contact us and we'll delete it.

9. Changes to this policy

We'll update the effective date above whenever we make changes, and for material changes, we'll notify you by email or text before they take effect.

10. Contact us

Questions about this policy or your data? Email hello@keshassist.com and a real person will get back to you.