Slocat Group, LLC ("SLOCAT," "we," "us," or "our") — a North Carolina limited liability company — operates Riley, an AI operations assistant. This policy explains how Riley accesses, uses, stores, and protects information from your Google Account when you choose to connect Google services such as Google Calendar, Google Sheets, and Google Docs. It applies specifically to data obtained through Google APIs. For our general company and SMS privacy practices, see the Slocat Group privacy policy.
The Google data we access
Riley only requests access to a Google service when you turn that feature on, and only to the narrowest scope each feature needs. Depending on which features are enabled for your assistant, you may authorize one or more of the following:
Google Calendar — https://www.googleapis.com/auth/calendar
- see the list of calendars on your Google Account and the events on them; and
- create, edit, and delete calendar events — only when you ask it to.
Google Sheets — https://www.googleapis.com/auth/spreadsheets
- read a spreadsheet you point Riley to — list its tabs and pull the rows in a range; and
- add or update rows and cells in that spreadsheet — only when you ask it to (for example, "add this to my tracker").
Because this feature both reads and writes on your behalf, it uses the full Google Sheets scope. Riley acts only on the specific spreadsheet you identify, and reports back only the changes Google's API confirms it made.
Google Docs — https://www.googleapis.com/auth/documents.readonly
- read the text of a Google Doc you point Riley to — for example a proposal, statement of work, or set of meeting notes — so you can ask questions about it or have it summarized.
This access is read-only: Riley never creates, edits, or deletes your Google Docs.
We do not request access to your Gmail, your Google Drive as a whole, your contacts, or any other Google data beyond the services listed above.
How we use it
Riley uses the Google data it accesses solely to provide the features you request — answering questions about your schedule, checking availability, and creating or changing calendar events; reading and updating the specific spreadsheets you identify; and reading the specific documents you identify — each at your explicit direction. We do not use your Google data for advertising, we do not sell it, and we do not use it to train generative AI/ML models.
AI processing and model training
Riley's natural-language features are powered by reputable third-party AI providers — which may include OpenAI, Anthropic, Google, and others — selected and kept current by Slocat. When you make a request, only the minimum Google information needed to fulfill that specific request is sent to the provider, in real time, and is used solely to generate Riley's response to you. Under these providers' commercial API terms, your inputs and outputs are not used to train or improve their models.
We do not operate our own AI/ML models, and we do not use Google Workspace API data (your Google Calendar, Sheets, or Docs data) to develop, improve, or train any generalized or non-personalized AI and/or machine-learning models. We do not sell your data, use it for advertising, or build databases or permanent copies of it for model training.
How it's stored and protected
We protect the Google user data we access with the following measures:
- Encryption in transit. All data travels over encrypted connections (HTTPS/TLS) at every hop — between your browser and Riley, between Riley and Google's APIs, and between Riley and our AI provider.
- Access controls. Your Google authorization (an OAuth refresh token) is stored on our server with strict owner-only file permissions and is readable only by your assistant's own process. It runs on private, access-restricted infrastructure and is never shared with any third party.
- Least-privilege access. The assistant reads or writes your Google data only to carry out a request you make. No member of our team routinely accesses your Google content.
- Encrypted backups. System backups are stored encrypted.
- Revocation and deletion. You can disconnect at any time; doing so revokes the token with Google and deletes the stored credential from our server.
Sharing
We do not share your Google data with third parties, except with Google's own APIs as needed to provide the service, or as required by law. We never sell your data.
Retention and deletion
You can disconnect your Google account at any time from the assistant's "Set up calendar" panel. Disconnecting revokes the credential with Google — across every authorized Google service — and removes it from your assistant. You may also revoke Riley's access directly from your Google Account at https://myaccount.google.com/permissions.
Limited Use
Contact
Questions about this policy or your data: email privacy@slocatgroup.com, or write to Slocat Group, LLC, 3939 Ayscough Rd, Charlotte, NC 28211.