Back to Prilo
Privacy•Terms of Service
Google OAuth & App Privacy Compliance

Prilo Privacy Policy

Application: Prilo | Domain: https://prilo.app | Last Updated: October 16, 2026

1. Introduction & Application Identity

This Privacy Policy explains how Prilo ("we," "our," or "the Application") accesses, collects, uses, stores, shares, and protects user data, including data obtained from Google services via Google Sign-In and Google APIs.

Prilo is an executive communication triage workspace hosted on https://prilo.app. By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy.

2. Google User Data: Access, Use, and Storage

When you use Google authentication or connect your Google account to Prilo, we access and handle your Google user data in strict adherence to Google's API policies:

A. Google Data We Access:

Depending on the permissions you explicitly grant, we access:

  • Basic Profile Data: Your name, email address, profile picture (avatar), and Google user ID to authenticate your account and set up your workspace profile.
  • Communication Metadata: If you connect email channels, message headers, timestamps, and thread identifiers necessary to organize communications in your unified inbox.
B. How We Use Google User Data:

Google user data is used solely to provide and improve user-facing features of Prilo, specifically:

  • Authenticating user identity and providing secure login sessions.
  • Displaying your identity and avatar to team members within your authorized workspace.
  • Displaying and routing your inbound and outbound messages in an organized queue.
C. Strict Prohibitions on Google User Data:

In compliance with Google User Data Policy requirements, Prilo explicitly affirms that:

  • We do NOT sell, rent, or transfer Google user data to third parties, data brokers, or information resellers under any circumstances.
  • We do NOT use or transfer Google user data for serving advertisements, including personalized, retargeted, targeted, or interest-based advertising.
  • We do NOT use Google user data to determine creditworthiness or for lending purposes.
  • We do NOT use or transfer Google user data to develop, improve, or train generalized, non-personalized artificial intelligence (AI) or machine learning (ML) models.
  • No humans at Prilo read your private message content unless you provide explicit affirmative consent for technical troubleshooting, it is strictly necessary for security investigations (such as abuse investigations), or it is required by law.
D. Google Limited Use Disclosure:

"Prilo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements."

3. Data Retention and Deletion Policy

In compliance with Google Cloud User Data Retention and Deletion standards:

  • Retention Period: We retain Google user data (such as profile details and authentication tokens) only for as long as your Prilo account remains active or as needed to provide you with the Service.
  • Temporary Attachment Purging: Staged files and message attachments uploaded via our message service are held in temporary transit storage and automatically purged every 6 hours.
  • Account Deletion & Data Purge: When your account is deleted or when you disconnect a Google integration, all associated OAuth refresh tokens, session credentials, and user data are permanently deleted or irreversibly anonymized within 30 days.
  • User Deletion Requests: You may request the immediate, permanent deletion of all your Google user data at any time by emailing us at support@prilo.app with the subject line "Google User Data Deletion Request". We will process and confirm your request within 5 business days.
  • Revoking Permissions via Google: You can independently revoke Prilo's access to your Google account at any time via the Google Security permissions portal at: https://myaccount.google.com/permissions.

4. Data Security Procedures

Security procedures are in place to protect the confidentiality, integrity, and availability of your data:

  • All network data transmitted between your browser, our servers, and Google APIs is encrypted in transit using Transport Layer Security (TLS 1.2 or higher / HTTPS).
  • Authentication tokens, secrets, and database records are stored encrypted at rest using AES-256 standards.
  • Row-Level Security (RLS) is enforced at the database level to ensure that data in your workspace is accessible only by authorized authenticated users.

5. Third-Party Service Providers

We do not share your Google user data with third parties except as strictly necessary to provide the core services of Prilo:

  • Supabase Inc. — Secure cloud database hosting and user authentication.
  • Vercel Inc. — Edge hosting and web infrastructure.
  • Stripe Inc. — Payment and subscription processing (does not access your messages or Google user data).

6. Contact Information & Data Protection Officer

For questions regarding this policy, to exercise your GDPR/CCPA privacy rights, or to submit a data deletion request, contact us:

Application Name: Prilo
Domain: https://prilo.app
Privacy Inquiries: support@prilo.app