Your information
Privacy Policy
Last updated: September 22, 2026
Promethios and BringMy.ai are operated by Promethios LLC ("we," "us," or "our"). This policy describes how we collect, use, share, and retain information when you use Promethios, BringMy.ai, their shared workspaces, and connected features.
For privacy questions or a request to access, correct, or delete your information, contact hello@promethios.ai. You do not need to sign in to read this policy or request deletion.
1. Information we collect
- Account and invitation information: your email address, name, profile image when provided, account identifier, sign-in provider, verification status, and beta invitation or waitlist details.
- Information you contribute: messages, prompts, files, workspace content, AI teammate settings, and feedback or support requests.
- Connected features: information made available through services or agents you connect, within the access you authorize. An agent may return responses, files, activity records, or tool results to a workspace.
- Technical and activity information: browser and device information, IP addresses processed by our infrastructure, session information, preferences, errors, and records of account, workspace, permission, and agent activity.
2. Facebook and Google sign-in
If you choose Facebook Login, Facebook and Firebase Authentication process the sign-in. We receive an identifier associated with your Facebook account and the basic profile information Facebook makes available, such as your name and profile picture. We request your email address when available and authorized. We use this information to authenticate you, create or identify your BringMy account, check your invitation, and display your profile.
Facebook Login requests public_profile and email. Signing in does not grant BringMy permission to read your Facebook messages, manage your Pages, or publish to your Facebook account. Any separate connected feature requires its own authorization. We do not receive your Facebook or Google password. Google sign-in similarly supplies account identification and profile information through Firebase.
Google integrations: access and use
Connecting a Google service is separate from Google sign-in. The Google consent screen identifies the permissions requested for that connection. The access below depends on the feature you choose and the permissions you grant; connecting one service does not by itself authorize every Google service.
- Gmail: sending features process the recipients, subject, message body, attachments, and send result for messages you ask to send. Features that read or monitor a mailbox require additional authorization and may process message identifiers, headers, content, attachments, labels, and thread history for the configured workflow. A send-only connection cannot read your inbox.
- Google Calendar: connected features process calendar identifiers and names, event titles, descriptions, times, attendees, and availability to show calendars, check scheduling conflicts, and create or update the events you request.
- YouTube: connected features may process your authorized channel identity, broadcasts, live-chat identifiers, messages, and author information to select a live chat, provide context to the agent you select, and deliver replies into that chat.
- Other Google services: when enabled and separately authorized, Contacts features process contact details; Drive and Sheets features process the files, metadata, and spreadsheet content needed for the feature you use.
- Connection records: we store the connected account identifier, granted scopes, connection status, and authorization tokens needed to maintain the connection. We do not receive your Google password.
Storage, sharing, and AI processing
Connection records and data saved by a workflow may be stored in our service infrastructure, including Firebase/Google Cloud and our hosting providers. Content used in a workspace may also be retained in its conversation history, files, tool results, and activity records. The information sent to a connected AI provider depends on the agent and task you select; it can include relevant Google content and authorized workspace context. Other authorized workspace participants can see content shared in that workspace.
Google API data is subject to the Google API Services User Data Policy, including its Limited Use requirements. These requirements limit use and transfer to appropriate user-facing features and permitted security, legal, or business-transfer purposes; prohibit sale, advertising use, and use to train generalized AI or machine-learning models; and restrict human access. Provider terms do not remove these requirements. Authorization for an integration is not consent to general-purpose model training.
Retention, revocation, and deletion
Connection records are retained while needed to maintain an authorized connection. Content saved into a workspace or activity history follows the retention described below and may remain after disconnection. You can revoke Google access through your Google Account connections and manage connections in the app's Settings. Revoking access stops future authorized access; it does not automatically delete previously stored workspace content. Request deletion of stored Google data or your account by emailing hello@promethios.ai. We may retain records required for security or legal obligations and will explain any applicable limits when handling a request.
3. Phone verification
If you use a phone verification feature when available, your number and verification information are processed by Firebase Authentication. Google receives and stores phone numbers for spam and abuse prevention across Google services. A verification text is for account access or security; it does not enroll you in marketing messages. Carrier message and data charges may apply. See Firebase's privacy information and Google's Privacy Policy.
4. How we use information
We use information to provide sign-in and account access, manage invitations, operate shared workspaces, deliver requested agent and integration features, respond to support requests, diagnose problems, maintain security and activity records, and meet applicable legal obligations. We also use feedback and operational information to improve the service.
5. Workspaces, agents, and other recipients
Content you share in a workspace may be available to its authorized participants, including connected AI teammates. Public content may be visible beyond your workspace. Choose the destination and audience before sharing confidential information.
When you use an external AI provider or integration, the context needed for the requested interaction may be sent to that provider. Its own terms, privacy policy, retention, and model-training settings apply to its processing. A reused provider session may retain context from earlier workspaces. Removing data from BringMy does not automatically remove copies held by a provider or another participant.
We use service providers for authentication, hosting, storage, email delivery, and related operations, including Google Firebase. They process information as needed to provide their services. We may also disclose information when required by law, to investigate misuse or protect people and the service, or in connection with a business transfer subject to applicable obligations.
6. Cookies and local storage
BringMy and its sign-in providers use browser storage and similar technologies for authentication, preferences, and service operation. Blocking or clearing this storage may sign you out or affect functionality. Third-party services you open or connect have their own storage practices.
7. Retention and security
We retain account and workspace information for the operation of the service and for applicable security, legal, and recordkeeping needs. Retention depends on the type of information and its purpose. Access controls and other safeguards help protect data, but no online service can guarantee absolute security. Our service providers may process information in countries other than your own.
8. Your choices and deletion requests
You can request access, correction, or deletion of information by emailing hello@promethios.ai. Depending on where you live, additional rights may apply, including objection to or restriction of processing, portability, withdrawal of consent, and contacting your local privacy regulator.
We may need to verify that a request comes from the account holder. We handle verified requests without undue delay and within applicable legal deadlines. Some information may need to be retained for legal or security reasons; we will explain relevant limitations when responding. Follow our data deletion instructions to request removal of Facebook-related data or your BringMy account.
9. Children
BringMy is not intended for children under 13. If you believe a child has provided personal information to BringMy, contact us so we can investigate and address it.
10. Policy updates and contact
We will post updates on this page and change the date above. Where required, we will provide additional notice of material changes. Contact Promethios LLC at hello@promethios.ai with questions.