Privacy Policy

10. Google User Data

This section applies only to licensed insurance agents who choose to connect a Google Calendar or a Gmail mailbox to their Silverpath account. Clients and other visitors to our website never sign in with Google, and we receive no Google data about them.

What we access

• Events on Google calendars you own (Google permission: “See, create, change, and delete events on Google calendars you own”), if you connect Google Calendar.
• Email in the Gmail mailbox you connect, if you connect Gmail. Google shows this permission as “Read, compose, and send emails from your Gmail account”. We use it to read your mail, to send the emails you write or set up in Silverpath, and to mark, label or file the messages you act on here. If sending from Silverpath is turned off, we ask only for “View your email messages and settings”.
• The email address of the Google account you connect, so we can show which account is linked.

We do not request access to your contacts, Google Drive, or any other Google data. Connecting Google Calendar does not give us access to your Gmail, and connecting Gmail does not give us access to your calendar.

How we use it — only to run the calendar features you turned on:

• Reading the times you are busy, so clients cannot book appointments over events already on your calendar.
• Adding appointments that clients book with you through Silverpath to your calendar, and updating or removing them if the appointment is rescheduled or cancelled.
• Showing which Google account is connected.

And, for Gmail, only to run the email features you turned on:

• Listing the mail in your inbox inside Silverpath: who it is from, the subject, the date, and whether you have read it.
• Matching a sender to your own client records, so a client's email appears on that client's record and you can see which messages still need a reply.
• Showing a message when you open it, and searching your mailbox when you search or when you open a client's Emails tab (we search for that client's email addresses).
• Sorting your mail and writing a one-line summary of what an email asks. To do this, the text of a message is processed automatically by an AI service we use under contract (Amazon Web Services). The text is not kept afterwards and is not used to train AI models.
• Writing a reply for you to review, when you ask for one or turn on prepared drafts. The message's text and the details already in your Silverpath account about that client are processed by the same AI service. Nothing is sent until you press Send.
• Answering a question you ask our assistant about an email: who it is from, the subject and the summary shown for that email are included in your question, and processed by the same AI service.
• Adding an email to your task list, when you choose to, and marking an email answered once you have replied to it.
• Keeping a copy of each email that is linked to one of your clients (its text and its attachments), so it can still be opened on that client's record after it is deleted from your mailbox.
• Where sending is turned on: sending from your own address the emails you write or set up in Silverpath (replies, new emails, and campaigns or automatic follow-ups to your own clients), and filing or marking the messages you act on. The people they go to are clients in your Silverpath account, and the words are yours. Your mail is used here only to hold back: a client who has replied is left out of a follow-up, and an automatic follow-up stops when that client replies.

That is the only use. Nothing we read from your Google account is used for the purposes described in section 2, such as finding people to contact about insurance.

What we never do with Google user data

• We do not sell it, and we do not use it for advertising, marketing, or retargeting.
• We do not use it for any purpose other than providing or improving the calendar and email features above.
• We do not transfer it to anyone, except the service providers that host our application and database and the AI service named above, who process it only to run these features on our behalf; when required by law; or as part of a merger, acquisition or sale of our business, and then only after asking for and receiving your explicit consent first.
• We do not use it to develop, train, or improve generalized artificial intelligence or machine learning models.
• No person at Silverpath reads it, unless you ask us to (for example, to help with a specific appointment or email), it is needed for security or to investigate abuse, or it is required by law.
• We do not use it to determine creditworthiness or for lending purposes.

How we store and protect it

• The tokens Google gives us to access your calendar or mailbox are encrypted with AES-256 and stored on our US-based infrastructure. All data travels over encrypted HTTPS connections.
• We do not store your calendar events. We read your busy times when availability is checked. For events Silverpath creates, we keep only the event's ID, so we can update or remove that event later.
• We do not store the body or attachments of email that is not linked to one of your clients. For each message in your inbox we keep the sender's name and address, the subject, the date, whether it was read, Gmail's ID for the message, and a short summary, which is encrypted. For a message forwarded to you, we also keep the original sender's name and address, encrypted.
• When a message is from one of your clients, the sender and subject are also noted on that client's record, where others in your agency who work with that client can see them. If an email becomes a task, the task keeps a short description of what was asked.
• For an email linked to one of your clients we keep a copy: its text, encrypted and shown only to you, and its attachments, saved to that client's documents, where others in your agency who work with that client can open them.
• If you turn on prepared reply drafts, a draft is stored encrypted for up to 14 days.
• Access to our systems is limited to authorized personnel.

Removing access and deleting data

• Disconnect Google Calendar at any time from the Calendar section of your Silverpath profile. Disconnecting deletes your stored Google tokens immediately.
• Disconnect Gmail at any time under Email, then Settings, in your Silverpath account. Disconnecting deletes your stored Gmail tokens immediately, and Silverpath stops reading the mailbox. The details already listed from your mail (sender, subject, date and summary) and the copies of your clients' emails stay in your account until you ask us to delete them.
• You can also remove access from your Google account at myaccount.google.com/permissions. For Google Calendar, we then delete your stored tokens the next time we try to use them. For Gmail, the tokens stop working at once; disconnect in your account to delete them.
• To have the event IDs or email details we keep deleted, or to ask any question about your Google data, contact us using the details in section 8.

Silverpath's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.