Anna Aide is an AI-powered executive assistant operated by Nandeep Nagarkar, operating as SVAG Labs. Anna operates entirely through email — no app, no dashboard. This policy explains what data we collect, why, how long we keep it, and your rights.
Contact: svaglabs@gmail.com
When Anna reads your Gmail to generate a brief, she processes the email live, uses it in that moment, and discards the content immediately. Nothing is written to Anna's database. Your emails stay in your Gmail account.
Anna stores only what is necessary to operate your account:
| Data | Why it's stored | How long |
|---|---|---|
| Your email address | Account identification and service delivery | Duration of account + 12 months post-cancellation |
| First name | Personalised responses from Anna | Duration of account + 12 months post-cancellation |
| Payment status | Service access control | Duration of account + 12 months post-cancellation |
| Service preferences | VIP contacts, brief timing, active directives, email monitors | Duration of account |
| Behavioral patterns | Meeting frequency, email volume averages — metadata only, no identities | Duration of account |
| Brief log | Quality assurance — counts of emails, actions, signals per brief | 12 months rolling |
| Cancellation journey record | Email address, plan type, and key account dates (signup, payment, cancellation) — service history for our early cohort | Retained permanently — the one exception to the 12-month deletion policy in Section 9 |
Anna connects to your Google account via OAuth 2.0. The permissions Anna requests and why:
| Permission | Why it's needed |
|---|---|
| Read Gmail | Scan for priority emails, VIP senders, and meeting requests during brief cycles. Read only. Nothing stored. |
| Send email on your behalf | Send meeting slot options to requestors from your address, coordinating scheduling as you. |
| Read Google Calendar | Check your availability, build the meetings section of your daily brief, find open slots for scheduling. |
| Edit Google Calendar | Create calendar holds when you approve a meeting request; convert them to confirmed events when accepted. |
| Google Drive (EA folder only) | Save research briefs, meeting prep notes, and polished meeting notes to your EA folder only. |
Anna does not request and does not use "full mailbox access" or the ability to delete emails.
Revoking access: Go to myaccount.google.com/permissions → find Anna Aide → click Remove Access. Anna stops immediately. Nothing is deleted from your Google account.
| Service | Purpose | Data shared |
|---|---|---|
| Google (Gmail, Calendar, Drive APIs) | Core service delivery | OAuth tokens only — no email content |
| Anthropic Claude API | AI processing for briefs and research | Email content passed transiently, not stored by Anthropic per their API terms |
| Stripe | Payment processing | Name and email for payment — Anna never sees card details |
| Render | Application hosting | OAuth tokens stored on persistent disk |
| Supabase | Database | Account credentials and service preferences only |
Anna does not sell, share, or monetise your data with any third party beyond the above operational services.
For users in the European Economic Area, our lawful basis for processing is contract performance (Article 6(1)(b) GDPR) — your email address and name are required to deliver the service you paid for. No other personal data is processed.
Anna stores operational preferences (VIP list, brief timing, directives) as service configuration metadata, not personal data in the regulatory sense. No behavioral profile in the Article 4(1) sense is built — patterns are stored without identities.
Anna does not sell personal information. Stored signals are service configuration metadata. You have the right to know what we hold, request deletion, and opt out of any sale (no sale occurs).
Account credentials (email, name, payment status) are retained for up to 12 months after cancellation for fraud prevention. After 12 months, all personal data is permanently deleted. Brief logs are retained for 12 months on a rolling basis. Behavioral patterns are deleted on account cancellation.
One exception: a minimal cancellation journey record — email address, plan type, and key account dates (signup, payment, cancellation) — is retained permanently in a separate internal log, so we can understand service history across our early cohort. This record never includes email content, calendar data, directives, or activity details of any kind.
OAuth tokens are stored in isolation on Render's persistent disk — one file per user, never commingled. A breach of Anna's email account would not expose your inbox. Your data lives in your Google account, protected by your own security settings. Anna's Gmail access is read-only for your inbox — even a stolen token cannot send, delete, or modify your emails.
Anna is intended for C-suite executives and senior professionals. We do not knowingly collect data from anyone under 18.
We will notify active users by email before any material change to this policy. Continued use after notification constitutes acceptance.
SVAG Labs
svaglabs@gmail.com