Privacy Policy
Last updated: November 4, 2026
Naomi AI provides Naomi, an AI secretary for businesses. This policy explains what data Naomi uses, with a focus on Google user data. Questions and requests: tal@naomiai.co.il.
The Google data Naomi accesses
Each business owner chooses whether to connect Gmail and Google Calendar. Naomi does not access Google Drive or Google Contacts.
| Google permission | What Naomi does with it |
|---|---|
| Sign-in openid, email, profile | Confirms that the person signing in is the business owner, and identifies the connected account. Naomi keeps the email address and Google account ID, not the rest of the profile. |
| Gmail gmail.modify | Searches email and reads messages, including sender, recipients, subject, date and body. Creates drafts and sends email from the owner's account, including notifications to the owner. Google's permission is broader than this: Naomi does not use it to delete messages or change their labels. |
| Google Calendar calendar.events, calendar.readonly, calendar.events.freebusy | Reads events and busy times. Creates, moves and cancels events. Google emails an invitation, update or cancellation to the event's guests. |
How Naomi uses it
Naomi uses Google data only to provide the features the owner sees in the app:
- carrying out what the owner asks in chat, and the scheduled tasks and monitors the owner sets up;
- checking every 30 minutes for new inbox messages and for meetings in the next 24 hours, so she can tell the owner what needs attention;
- on calls, using busy times to offer a caller free slots and adding booked meetings to the calendar. Naomi does not tell callers what is in the owner's calendar or email.
Actions that change something follow the permissions and rules the owner sets in the app. By default, Naomi creates, moves and cancels calendar events, books meetings for callers and saves email drafts without asking first. She asks before sending an email, apart from notifications the owner chose to receive by email. The owner can change these defaults in the app.
Naomi AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use or transfer it for advertising, or use it to determine creditworthiness. We do not use it to train generalized AI or machine-learning models, and we do not allow anyone else to.
People at Naomi AI do not read Google user data, unless the owner asks us to for specific data, it is necessary for security (such as investigating a bug or abuse), or the law requires it.
How it is stored
- Each business runs on its own server and its own encrypted disk at Fly.io, in Frankfurt, Germany. Data travels over encrypted connections.
- The token that lets Naomi reach a connected Google account is kept in a restricted file on that disk. It goes only to Google.
- Naomi does not copy the whole mailbox or calendar. What is stored is what comes up in her work: conversation messages (which can quote email and calendar content), her notes, tasks, pages, and the IDs of items she has already checked.
- This data is kept until the owner deletes it or asks us to delete it. Disk backups are kept for up to 5 days.
Who receives it
- OpenAI provides the AI models. Whatever Naomi reads for a task, including email and calendar content, is sent to OpenAI to process it, in the United States. The owner's chat with Naomi is stored at OpenAI until it is deleted, and zero data retention does not apply. OpenAI may keep logs for up to 30 days to detect abuse, and states that it does not train its models on API data by default. On calls, OpenAI also processes the caller's voice, number and details, as described below.
- Fly.io hosts the servers, as described above.
- Google receives the requests and actions the owner connected Naomi to perform.
- Browser push services carry an empty signal to wake the app. The content of a notification comes from our server, not through them.
- A telephone carrier connects calls when a business turns on its phone line.
We share data beyond this only to comply with the law, or to protect security. If Naomi AI is merged or sold, we will ask for explicit consent before transferring Google user data.
People who call a business
Naomi is an AI, and she introduces herself to callers as the business's digital secretary. To run a call, OpenAI processes what the caller says, the caller's number and the details they give. After the call, the transcript and number go to an OpenAI model that writes the summary for the owner. We ask OpenAI not to store the call session or the summary, and we do not store call audio. The model that works behind the scenes during a call has no such setting, so OpenAI's standard handling may apply to what it receives. The transcript, the caller's number and the details they give are kept in a private record for the business owner until deleted, and technical logs of calls are kept for up to 14 days. The business decides how this information is used. A caller can ask the business, or write to us, to see or delete their details.
Your choices and deletion
- Disconnect Google: in the app, go to Customize, then Plugins, and disconnect the account. Naomi deletes its token and revokes it at Google. You can also remove access at myaccount.google.com/permissions.
- Delete in the app: Naomi's Delete option removes the conversation, notes, tasks, the pages Naomi wrote, and call records and logs, and asks OpenAI to delete the chat session. Pages you wrote yourself, pages in the space for callers, and connected accounts stay until you remove them.
- Delete everything: email tal@naomiai.co.il from the owner's address. We will delete the business's server, disk and OpenAI data within 30 days, and backups expire within 5 more days.
Emails Naomi sent and events she created stay in your Google account, since they are yours. You manage them in Google.
Children
Naomi AI is a service for businesses and is not directed at children.
This website
This website uses no cookies and no analytics.
Changes
We will update this page when our practices change. Before using Google user data in a new way, we will notify owners and ask for their consent.