Wren Privacy Policy

1. Data We Collect

Account information. If you connect Wren through Synchronex, your Synchronex account email identifies you. Wren itself does not require a separate signup.

Gmail data, via Google’s Gmail API. When you connect a Gmail account to Wren, we access message content and metadata (sender, subject, snippet, labels, timestamps) for the accounts you connect, in order to triage your inbox and answer your questions about it. If you enable send, draft, or reply capability, we also use the API to send, draft, or modify email on your behalf, only for actions you have explicitly approved.

State we store. To do its job, Wren keeps a small working memory: which messages it has already seen, a capped summary of your preferences and corrections, and your recent triage history. This is stored either in your own connected Google Drive (for the desktop version) or in our own database, encrypted and scoped to your account (for the hosted version).

Connected credentials. Gmail OAuth refresh tokens are stored encrypted at rest and used only to fulfill the Gmail actions you have authorized. We never expose them in plaintext, and we never share them with any third party.

Usage data. We collect basic product telemetry such as feature use, triage run counts, and error rates, to keep Wren working and improve it. This is aggregated and not used for advertising.

Log data. Server logs capture IP addresses, timestamps, and request paths for security monitoring and debugging. Logs are retained for up to 90 days.

2. How We Use Your Data

• To read and triage the Gmail accounts you connect, and to answer questions you ask Wren about them.
• To carry out actions you explicitly approve (sending, drafting, replying, labeling, archiving). Wren does not take these actions unprompted.
• To remember your preferences and corrections so triage gets more accurate over time.
• To detect, investigate, and prevent abuse or security incidents.
• To improve Wren using aggregated, non-identifying usage patterns.

We do not use your email content to train AI models. We do not sell, rent, or broker your data to any third party for any purpose.

3. AI Provider Data Sharing

Wren works by passing relevant email content and your questions to an AI model to generate triage summaries, draft text, or answers. Depending on how you have set Wren up, that model may be Anthropic’s Claude, OpenAI’s ChatGPT, Google’s Gemini, or another provider you have connected. Whichever provider handles a given request receives only the specific content needed to answer that request; it is not given standing access to your mailbox.

4. Compliance with Google’s API Services User Data Policy

Wren’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• Gmail data is used only to provide and improve Wren’s user-facing email assistant features.
• We do not use Gmail data for serving advertisements.
• We do not allow humans to read Gmail data except with your affirmative consent for a specific purpose (for example, debugging an issue you have reported), to comply with applicable law, or to investigate a security incident.
• We do not transfer Gmail data to third parties except as necessary to provide the features you have enabled (for example, the AI provider you have chosen to handle a specific request), to comply with law, as part of a merger or acquisition subject to this policy continuing to apply, or with your explicit consent.

5. Data Retention

Gmail message content is not retained beyond what is needed to generate a triage summary or answer. Wren keeps a compact summary and triage history, not a copy of your mailbox. You can request deletion of all stored Wren state at any time (see Section 6).

6. Your Rights

You can disconnect Wren from your Gmail account at any time, which immediately stops all access. Do this from Wren’s own settings, or by revoking access directly at Google Account permissions. You can request a copy of, or deletion of, any data Wren has stored about you by contacting us (Section 8). Deletion requests are honored within 30 days.

7. Children

Wren is not directed at children under 13, and we do not knowingly collect data from them.

8. Contact

Questions about this policy, or requests to access or delete your data: kevin@synchronex.ai

9. Changes to This Policy

We will update the effective date above when this policy changes, and post material changes here before they take effect.