Google API Services: Limited Use Disclosure
Keystone's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
What we access
When a brand user connects Gmail, Keystone requests gmail.readonly and gmail.send (plus basic sign-in identity). We read inbound messages to log replies from your leads and customers on the right record and to surface new wholesale inquiries for your review. We send only the one-to-one emails you write and send from Keystone.
How AI is used
When our rules can't categorize a new inbound message, Keystone sends the sender's name and address, the subject, the Gmail snippet, and up to 800 characters of the body to an AI model. The model returns only a category and a short reason that we show you. A few examples your own team labeled in your inbox may be included to improve accuracy for your account only. Lead details Keystone derives from email, such as company name and contact email, may also be used when you ask Keystone's in-app assistant about that lead.
AI providers
OpenAI (API platform) and, when configured, Amazon Web Services Bedrock (Anthropic Claude). These providers process data only to return results to Keystone and do not use it to train their models. We do not use aggregators or model hubs.
What we never do
We do not use Google user data, raw, aggregated, or derived, to create, train, or improve any generalized or foundational AI/ML model. We do not sell it, use it for advertising, or transfer it except as needed to provide the features above, for security, or to comply with law. Humans do not read it except with your consent, for security or legal reasons, or in aggregated, anonymized form.
Other processors
To fill in a store's address, Keystone sends the company name from a lead's email domain to the Google Places API.
Revoking access
Disconnect Gmail anytime under Settings > Email > Connected Inboxes in Keystone (we delete the stored tokens), or at https://myaccount.google.com/permissions.