Google API Services - Limited Use Disclosure
Otofi's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Limited Use Compliance Statement: The use of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data obtained through Google APIs is used only to provide and improve the features you explicitly request. We do not use this data to serve advertisements, and we do not sell, transfer, or share it with third parties except as necessary to operate the service or as required by law.
Google Permissions We Request
Google Calendar
calendar.eventsCreate and write calendar events on your behalf.
When an Otofi AI voice agent qualifies a lead and the contact agrees to a meeting, the appointment is booked directly into your Google Calendar.
Gmail
gmail.sendSend emails from your Gmail account on your behalf.
Otofi can send automated follow-up emails to leads after a call, for example, meeting confirmations or call summaries.
Google Account Identity
userinfo.email / openidYour Google account email address and basic profile identity.
Used solely to identify which Google account is connected to your Otofi workspace and to label the integration correctly.
Call Recording and AI Analysis
Otofi's core function is placing and receiving AI-powered voice calls on behalf of your organisation. Every call may be recorded and processed as described below.
- All calls made or received through Otofi may be recorded.
- A full text transcript of each call may be generated and stored.
- You are responsible for ensuring contacts are informed that calls may be recorded, in compliance with applicable laws in your jurisdiction.
Data Storage and Security
- OAuth tokens issued by Google are stored in encrypted form using AWS KMS (Key Management Service).
- Tokens are scoped strictly to the permissions listed above and are never used for any other purpose.
- All data is encrypted at rest and in transit.
- We apply least-privilege access controls - only the systems that need a token to perform an action can access it.
- We store records of emails sent (recipient, subject, body) and calendar events created (title, start/end time, attendees) for operational and audit purposes.
Data Sharing
We do not sell, rent, or share your Google account data with third parties, except in the following narrow cases:
- Google APIs: To fulfill the actions you authorize: booking calendar events and sending emails.
- Legal requirements: If required by law, valid legal process, or to protect the rights and safety of our users or the public.
AI/ML Data Isolation: Otofi integrates with third-party AI services (including OpenAI, Deepgram, and Google AI) to power voice calls and post-call analysis. These AI services process call audio and transcript data only; raw or derived Google Workspace user data (Gmail inbox content, existing calendar entries, or account information) is never transmitted to any AI/ML provider. Our Google API integrations operate write-only: Gmail is used solely to send outbound emails, and Google Calendar is used solely to create new events. No existing user data from these services is read, extracted, or forwarded to third-party AI models.
Revoking Access
You can disconnect your Google account at any time from Settings > Integrations inside Otofi. This immediately invalidates the stored tokens and stops all Google API activity.
You may also revoke access directly from your Google Account Permissions page.
Data Retention
OAuth credentials are deleted within 30 days of account termination or integration disconnection. You may request immediate deletion by contacting us at the address below.
Otofi is a B2B platform intended for users 18 years or older. We do not knowingly collect personal data from children under 13.
Changes to This Policy
We may update this Privacy Policy periodically. When we do, the "Last updated" date at the top of the page will be revised. Continued use of Otofi after changes are posted constitutes acceptance of the revised policy.
Contact Us
For questions about this Privacy Policy or to request data deletion, reach out to us:
