ClausBox Privacy Policy

Last updated: 19 October 2026

ClausBox is an AI assistant for businesses, operated by Sapphire Business Automations LTD ("we", "us"). This policy explains what information ClausBox collects, how it is used, and the choices you have. It applies to clausbox.one, auth.clausbox.one and the ClausBox assistant.

1. Who is responsible

Sapphire Business Automations LTD is the controller of the account data described here. When ClausBox works with your Google data on your instruction, we process that data on your behalf.

Contact: [email protected]

2. Information we collect

• Account information: your name, email address and the messaging account you use to talk to ClausBox.
• Google user data, only when you connect your Google account: depending on the permissions you grant, ClausBox may access your Gmail messages, Google Calendar events, Google Drive files, Google Sheets, Google Docs and Google Contacts (People API).
• Conversation data: the instructions you give ClausBox and the results it returns.
• Technical data: server logs such as IP address and timestamps, kept for security.

3. How we use Google user data

ClausBox uses Google user data only to carry out the tasks you ask for, for example:

• reading and drafting email, and sending it when you confirm;
• reading and creating calendar events;
• finding, reading and updating the documents, spreadsheets and files you point it to;
• looking up contacts to address a message or invitation.

ClausBox accesses your Google data only when a task you requested needs it. It does not scan your account in the background for any other purpose.

4. Limited Use

ClausBox's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• we use Google user data only to provide and improve the features you use in ClausBox;
• we do not sell Google user data;
• we do not use Google user data for advertising, including retargeting or interest-based ads;
• we do not use Google user data to train, develop or improve generalised artificial intelligence or machine learning models;
• no person at our company reads your Google user data, except with your explicit consent for a specific item, when necessary for security or to investigate abuse, or when required by law.

5. AI processing

To understand your requests and prepare answers, ClausBox sends the relevant content to an AI model provider acting as our processor. The provider processes the content only to return a result to us, under a contract that forbids using it to train its models.

6. Sharing

We share data only with service providers that ClausBox needs in order to work: our hosting provider, our AI model provider and our messaging provider. Each acts on our instructions under a data processing agreement. We share data with authorities only when the law requires it. We never sell personal data.

7. Storage and security

ClausBox runs on servers in the European Union. Access tokens from Google are stored encrypted and are used only by ClausBox. All traffic to and from ClausBox is encrypted in transit (HTTPS).

8. Retention and deletion

• Google user data is fetched when a task needs it and is not kept longer than the task requires, unless you ask ClausBox to save a result.
• Your Google access token is kept until you disconnect ClausBox or close your account.
• You can revoke ClausBox's access at any time at https://myaccount.google.com/permissions. We then delete the stored token.
• To delete your account and all associated data, write to [email protected]. We complete the deletion within 30 days.

9. Your rights

Under the GDPR you have the right to access, correct, erase, restrict or object to the processing of your personal data, the right to data portability and the right to withdraw consent. To exercise them, write to [email protected]. You may also lodge a complaint with your data protection authority.

10. Children

ClausBox is a business service and is not intended for anyone under 16.

11. Changes

We will post any change to this policy on this page with a new date. Material changes affecting Google user data will be notified to you before they take effect.

12. Contact

Sapphire Business Automations LTD Email: [email protected]