Privacy Policy

How MainFoundry handles your data, including the data we access from Google Workspace when you connect a mailbox or calendar.

Last updated: August 2026

Google user data

MainFoundry can connect to your Google Workspace or Gmail account so that the email and meetings you already have become CRM records. Connecting is always your choice, the access is granted through Google's own consent screen, and you can disconnect at any time.

What we request and why

We request the narrowest scopes that support the features below. Each scope we ask for is listed here.

gmail.readonlyRead the email you receive and the email you send, including metadata, message bodies, participants and attachments, so they can be filed against the right company and contact. This covers the mail in your account other than Trash, not only your inbox. On first connection we read up to 30 days of existing mail, then keep up with new messages. Drafts and deleted messages are never synchronised.

gmail.composeCreate drafts, send messages and send threaded replies — only when you ask for those actions.

gmail.sendSend messages from a mailbox your organisation has connected to an AI agent, only for workflows your organisation has explicitly configured.

calendar.eventsRead calendar events and create invitations, including attendees and conference links, so meetings appear on the right company timeline.

openid, userinfo.email, userinfo.profileIdentify the Google account you are connecting, so the mailbox is attached to the correct user.

adwords — separate, optional connectionRead cost and performance data from your own Google Ads account, and upload first-party conversions, for marketing reporting and attribution. This is a separate connection with its own consent step, granted through a different application than the one that reads your mailbox. Connecting a mailbox never requests it, and most customers never grant it.

How we use it

To store synchronised CRM records and attachments for your organisation, and to show them in the product.
To run the AI agent workflows your organisation has explicitly configured.
We never use Google Workspace data for advertising, we never sell it, we never use it for credit decisions, and we never use it to train generalised AI or machine learning models.

Retention and deletion

Disconnecting an account stops all provider watches and deletes the stored credentials, synchronisation cursors and watch secrets immediately. CRM history that was already synchronised remains until it is deleted under your organisation's own retention policy, so that your records do not silently disappear.

Limited Use

MainFoundry's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Full privacy policy

The complete policy, covering all personal data we process and your rights over it, is available as a PDF.

Contact

For any question about this policy or about the data we hold, write to contact@clearcontract.dk.