Back to home
Legal

Privacy Policy

Last updated: July 8, 2026

01Introduction

SUVI ("we", "our", or "us") operated by SUVI PTE LIMITED is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services at suvi.ai.

02Information We Collect

We may collect the following types of information:

  • Account Information: Name, email address, and profile details when you sign up or authenticate via Google OAuth.
  • Usage Data: Information about how you interact with our platform, including pages visited, features used, and session duration.
  • Device Information: Browser type, operating system, IP address, and device identifiers.
  • Communications & Integrations: Data processed through connected services such as Slack, when you choose to integrate them with SUVI.
  • Connected Google Data: When you connect your Google Account, we access and process your Gmail, Google Drive, and Google Calendar data as described in the Google OAuth & API Data section.

03How We Use Your Information

  • To provide, maintain, and improve our services.
  • To authenticate your identity and manage your account.
  • To communicate with you about updates, support, and promotional offers.
  • To analyze usage patterns and improve user experience.
  • To comply with legal obligations.

04Data Sharing & Disclosure

We do not sell your personal information. We may share your data with:

  • Service Providers: Third-party services that assist in operating our platform (e.g., hosting, analytics). The specific sub-processors that may receive user-derived content are listed in the Sub-processors section below.
  • Legal Requirements: When required by law, regulation, or legal process.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.

05Google OAuth & API Data

When you connect your Google Account, Suvi requests only the access listed below, and uses each type of access only as described:

  • Email address (userinfo.email): used for sign-in and account identity only.
  • Gmail, read and organize (gmail.modify): to read and summarize your mail, organize it with labels (including custom labels that Suvi creates), and create draft replies.
  • Gmail, send (gmail.send): to send and reply to emails. Sending is always user-initiated; Suvi never sends automatically.
  • Google Drive (drive): to search, read, create, and edit your Drive files (including Google Sheets), and to monitor your Drive for changes so we can notify you.
  • Google Calendar events (calendar.events): to read, create, update, and delete calendar events, monitor your events, and auto-join meetings on your behalf.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

  • We do not sell your Google user data, use it for advertising, or use it to train or fine-tune machine-learning models.
  • Human access to your Google user data is restricted to what is needed to provide the feature, for security, or to comply with law. Our operational application logs may contain limited metadata, such as calendar event titles and meeting action-item snippets.

Embeddings and other derived data are stored in our own database; we do not use a third-party vector service. Raw email bodies are processed transiently and are not retained in full-text storage. We do not store your Google credentials beyond the OAuth tokens required to keep the features you enabled working, and you can revoke this access at any time from your Google Account permissions.

06Sub-processors

To provide the Service, we share limited user-derived content with the sub-processors below. Each receives only the data needed for its function:

  • Anthropic (Claude): our primary processor. Email, document, and calendar text is sent here for summarization, chat, and OCR.
  • OpenRouter: image generation only. Receives image prompts and any images you supply; it does not receive email or document text.
  • Deepgram: optional meeting-audio transcription, used only when you enable it. Otherwise transcription runs on-device.
  • Metastart (our operational infrastructure): the app may send conversation excerpts, which can include summarized email content, to our own first-party infrastructure for product analytics and insights.
  • LeadRat: used only when you direct Suvi to push a lead to your CRM.
  • GitHub: optional encrypted backup of your assistant memory, which may contain user-derived facts.

07Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL) and at rest. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

08Data Retention and Deletion

We retain your data only for as long as necessary to provide the Service and for legitimate operational purposes.

You can revoke access to your Google Account at any time from your Google Account permissions, which stops any further access. To request deletion of your Google data, contact us at contact@suvi.ai, and we will process your request.

A self-serve Delete my Google data action in your account settings is being rolled out. Once available, that action and account deletion will revoke Google access and remove the Google-derived data we hold, such as email drafts and briefs, calendar events, and meeting transcripts and audio, from our systems. Until then, we honor deletion requests received by email.

09Your Rights

Under the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction or deletion of your data.
  • Object to or restrict processing of your data.
  • Withdraw consent at any time.
  • Request data portability.

10Cookies

We use cookies and similar technologies to enhance your experience, analyze traffic, and personalize content. You can control cookie preferences through your browser settings.

11Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

12Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the Hong Kong Special Administrative Region. For any questions regarding your personal data rights under the Hong Kong Personal Data (Privacy) Ordinance (PDPO), you may also contact the Office of the Privacy Commissioner for Personal Data, Hong Kong.

13Contact Us

If you have questions about this Privacy Policy, please contact us:

  • Company: SUVI PTE LIMITED
  • Address: A Block, Hankow Centre, 47 Peking Road, Tsim Sha Tsui, Hong Kong
  • Email: contact@suvi.ai