Privacy
Last updated 17 September 2026. This is how the product actually works. It is not legal advice. A lawyer should read it before it is a contract term.
Who we are
AutomaTeam runs an invite-only portal at app.automa-team.com and the public site at www.automa-team.com. Contact: hello@automa-team.com. We treat Singapore PDPA as the first privacy bar.
What we collect
- Account email and password you use to sign in to the portal.
- Chat with specialists (your words, their replies), run status, spend, and approval decisions.
- Connection grants you start: Notion pages you share; Google Gmail, Calendar, Sheets, Docs, and Drive data the specialist fetches after you click Allow.
- Telegram user id and handle if you link or wake a desk from Telegram.
- Site contact-form messages sent to hello@automa-team.com.
Google user data
If you connect Google, AutomaTeam’s app may read and — only when you asked — modify Gmail, Calendar, Sheets, Docs, and Drive files in the scopes shown on Google’s Allow screen.
We use that data solely to run your desk: triage mail, draft replies, manage events, and open the files you name. We do not sell it. We do not use it for ads. We do not use it to train AutomaTeam models. We do not put Google credentials on the specialist’s machine or into a model prompt.
Access and refresh tokens stay on our portal servers, encrypted. Each Google grant is one person on one desk. A teammate's wake cannot open your inbox. Disconnect in the portal deletes our stored tokens. You should also revoke AutomaTeam in your Google Account → third-party access. Sending or trashing mail still needs your approval in the desk.
The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.
Where it lives
- Portal database (Supabase): chat, spend, approvals, encrypted connection tokens.
- Your Notion workspace, if connected — only pages you shared.
- Cursor’s cloud: the prompt for a run (your message plus the specialist’s brief) and that run’s tool output. Privacy Mode means they say they do not train on it. It does not mean they store nothing.
- Inngest: job queue state while a run is in flight.
- Vercel: hosts the portal. Telegram: delivers messages you send to the desk bot.
- Lookup vendors (for example Places, Serper, Firecrawl) receive search terms during a lead hunt — not your inbox.
One client desk cannot read another’s. We do not dump live inbox or CRM lists into git.
How long we keep it
Portal chat and run records stay until you ask us to delete the desk, or until we turn on the published retention window for that desk. Encrypted Google and Notion tokens are deleted as soon as you disconnect. Cursor-side history is removed when we archive that desk’s agents — say so if you want that done.
Your choices
- Read the transcript in the portal or Telegram.
- Edit office files in Notion or Google yourself.
- Disconnect Notion or Google here; revoke the grant in that product too.
- Email hello@automa-team.com to access, correct, or delete a desk. We will also archive the agents and drop the tokens.