Privacy Policy

At Giga, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our service.

1. Information We Collect

We collect information that you provide directly to us when you create an account, connect integrations, or communicate with us. This may include your name, email address, workspace configuration, and any content you submit through the Service.

When you connect third-party integrations (including Google Workspace, Gmail, Google Drive, Slack, and others), we may access, store, and process data from those services solely to fulfil your requests and provide the Service's functionality.

2. How We Use Your Information

We use your information to provide, maintain, and improve our services, process transactions, send technical notices, and respond to your requests.

3. Google User Data & Limited Use

Giga's integration with Google services (including Gmail and Google Drive) is governed by the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Access to Google user data is limited to what is necessary to provide the features you explicitly request (reading email context, accessing files, etc.).
• We do not use Google user data for advertising, targeting, or any purpose other than fulfilling your direct requests.
• We do not transfer Google user data to third parties except where necessary to provide the Service (e.g., processing at your direction) or as required by law.
• We do not train AI models on Google user data. Any LLM processing of your data is ephemeral, scoped to your current request, and does not contribute to model training.

4. Data Retention & Deletion

We retain your data for as long as your account is active or as needed to provide the Service. When you disconnect an integration, we stop accessing that data. When you delete your account, we delete or anonymise your data within 30 days, unless we are required by law to retain it.

To request deletion of your data at any time, contact us at support@getgiga.com.

5. Data Security & AI Processing

We implement appropriate technical and organisational security measures designed to protect your information, including encryption at rest and in transit.

Giga uses a vault-proxy architecture for all third-party integrations. When you connect a service (e.g., Gmail, Google Drive, Slack), your credentials — API keys, OAuth tokens, and other secrets — are stored encrypted in a dedicated vault and are never exposed to our AI models or placed into model context. All authenticated requests are proxied through the vault, which injects the credential server-side so the raw secret never reaches the application layer.

When you ask Giga to act on connected data (e.g., summarise an email, find a file), the relevant content may be passed as ephemeral context to an LLM solely to fulfil your request. This processing is transient: context is not stored after the response is generated, and we do not train foundational AI models on your private data, chat history, or connected-service content. Your data remains yours.

We conduct regular security reviews of our architecture and comply with the Google API Services User Data Policy, including the Limited Use requirements, for all Google user data processed through the Service.

6. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the Service.

7. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at support@getgiga.com.