We are committed to transparency about our data practices. Because our Service involves AI processing of your data, it is important that you understand what happens to the information you provide. This Policy applies to all users of the Service, including free-tier users, paid subscribers, Marketplace creators, and affiliate program participants.
When you register, we collect: name, email address, and password; profile information you choose to add; payment information for paid subscriptions (processed by our payment provider — we do not store full card numbers); and company or organization information if you create a company profile.
When you use the Service, you may provide:
With your explicit authorization, we access data from:
We access ONLY the data and permissions you explicitly grant. You may revoke access to any connected service at any time through your account settings or through the respective third-party platform.
When you authorize MyTeam365 to access your Google account, we request the following OAuth scopes. Each is shown to you on Google's standard consent screen before you authorize.
Basic identity (always requested)
userinfo.email — your primary Google Account email addressuserinfo.profile — your name and any publicly available profile informationopenid — associate the session with your Google identityGoogle Drive — narrow file scope
drive.fileGoogle Docs, Sheets, and Slides (sensitive scopes)
auth/documents, auth/spreadsheets, auth/presentationsGoogle Calendar — events scope
calendar.eventsNote about Gmail: MyTeam365 does not currently request OAuth access to Gmail. If you want your Teammates to read or send email on your behalf, MyTeam365 supports an IMAP-based connection where you generate an app-specific password through your email provider. We may evaluate a Gmail OAuth integration in the future; if added, this policy will be updated and you will be asked to authorize the new scope separately.
You can review the exact OAuth scopes being requested at the time of authorization on Google's consent screen. You may revoke MyTeam365's access to your Google data at any time at myaccount.google.com/permissions.
We automatically collect: device information (browser type, operating system); IP address and approximate location; usage data (features used, session frequency, interaction patterns); cookies and similar tracking technologies; and error logs and performance data.
Through your use of the Service, our AI systems generate:
This AI-generated data is associated with your account and treated with the same protections as data you provide directly.
If you participate in our affiliate program, we collect and process: your unique affiliate code and referral links; referral tracking data (which users signed up through your link); commission calculations, earnings, and payout history; Stripe Connected Account information for payouts; and tier status and advancement history.
We use your information to:
We do NOT:
Specifically, with respect to data received from Google APIs (including Google Calendar, Google Drive, Google Sheets, Google Docs, and Google Slides):
Where Google user data flows through these AI model providers as part of generating your Teammate responses, those providers act as service providers processing data on MyTeam365's behalf, under contractual restrictions equivalent to the Limited Use requirements. They do not store Google user data beyond the immediate processing window required to return a response, and they may not use the data for any other purpose, including model training, advertising, or analytics.
You may revoke MyTeam365's access to your Google data at any time via your Google Account at myaccount.google.com/permissions or through your MyTeam365 account settings.
To generate Teammate responses, your content (messages, knowledge source excerpts, and integration data relevant to the conversation) is sent to the AI model providers that power your Teammates:
These providers process your data to generate responses and return them to us. Under our agreements with these providers, your data is NOT used to train their general AI models and is NOT stored beyond the processing period required to generate the response.
Links to provider privacy policies: OpenAI, Anthropic, Google.
If you use voice features, text may be processed by ElevenLabs for text-to-speech voice generation. Your voice recordings uploaded as knowledge sources are transcribed using automated speech-to-text services and are not shared with ElevenLabs.
Subscription billing and affiliate payouts are processed through Stripe. Stripe receives payment information necessary to process transactions. Affiliate payouts are processed through Stripe Connected Accounts. Stripe's privacy policy applies to payment data they handle.
We share information with service providers who assist us in operating the Service, including hosting providers, email services, and analytics tools. These providers are bound by confidentiality agreements and may only use your data to provide services to us.
If you publish a Teammate to the Marketplace: other users can INTERACT with your Teammate; other users CANNOT see your uploaded knowledge sources, personality prompts, or configuration details; your Teammate's name, title, description, and avatar are publicly visible; usage statistics and community ratings are publicly visible; and you can unpublish your Teammate at any time.
If you use the Service within a team or company: team administrators may have access to shared Teammates and company-wide knowledge sources; individual session content remains private to session participants unless explicitly shared; and company-wide knowledge sources are accessible to all Teammates assigned to that company.
If you participate in the affiliate program, your affiliate tier and anonymized performance data may be displayed on the affiliate leaderboard. Your email address is masked. You can opt out of leaderboard visibility in your affiliate settings.
We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Your data is stored on secure servers provided by our hosting infrastructure. Data may be stored and processed in the United States.
You may delete your account, individual knowledge sources, sessions, and Teammates at any time through your account settings. When you delete data: it is removed from our active systems within 30 days; it may persist in encrypted backups for up to 90 days before being permanently purged; and data that has been processed by third-party AI providers cannot be recalled from their systems, though they do not retain it beyond the processing period.
We implement technical and organizational security measures including: encryption of data in transit (TLS/SSL) and at rest; access controls limiting employee access to user data; regular security assessments and monitoring; and secure authentication including password hashing.
No system is completely secure. While we strive to protect your data, we cannot guarantee absolute security. If we become aware of a security breach affecting your data, we will notify you in accordance with applicable law.
You may access your data through your account settings. You may export your Teammate configurations, knowledge sources, and session history at any time.
You may update or correct your account information and knowledge sources at any time.
You may delete your account and all associated data by contacting privacy@myteam365.ai or through your account settings.
You may disconnect any integrated service at any time through your account settings. Disconnection stops future data access but does not retroactively remove data already processed.
You may opt out of promotional communications at any time. Service-related communications (security alerts, billing notices) and affiliate transactional notifications (payout confirmations, tier changes) cannot be opted out of while your account is active.
If you are located in the European Union or European Economic Area, you have additional rights including: right to restrict processing; right to data portability; right to object to processing; and right to lodge a complaint with a supervisory authority. To exercise these rights, contact privacy@myteam365.ai.
California residents have the right to: know what personal information is collected; know whether personal information is sold or disclosed; say no to the sale of personal information (we do not sell personal information); access their personal information; request deletion of personal information; and not be discriminated against for exercising these rights.
Voice recordings you upload are processed for transcription and knowledge extraction. We do not use your voice recordings to create voice models, clone your voice, or for biometric identification purposes. Voice playback features use ElevenLabs' pre-built voice library, not recordings of your voice.
If you upload health-related information (fitness data, health records, wellness notes), this data is treated with heightened security and is used solely to provide your requested Teammate interactions. We are not a healthcare provider and this data is not subject to HIPAA unless we enter into a specific Business Associate Agreement with a covered entity.
Financial information you upload (budgets, tax documents, investment data) is used solely to power your Teammate interactions. We are not a financial institution and do not provide regulated financial services.
The Service is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected data from a child under 16, we will delete it promptly. If you believe a child under 16 has provided us with personal information, please contact us at privacy@myteam365.ai.
You may choose to create your Teammate's visual identity using third-party services such as HeyGen, Synthesia, D-ID, or similar platforms, and import the resulting avatar into MyTeam365. When you do so: your biometric and likeness data is processed by the third-party service under THEIR privacy policy, not ours; we store only the resulting avatar asset (image or video), not the underlying biometric data used to create it. This option is available for users who prefer to keep their likeness data off our platform.
If you use our built-in AI avatar generation, the avatar is created from AI generation, not from your actual likeness, and no biometric data is collected.
We use cookies and similar technologies to: maintain your session and authentication; remember your preferences and settings; understand how you use the Service (analytics); and prevent fraud and abuse. You can control cookies through your browser settings. Disabling certain cookies may affect Service functionality.
We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or business operations. For material changes, we will: update the "Last updated" date; provide notice through the Service (in-app notification); and for significant changes affecting your data rights, request renewed consent.
Privacy inquiries: privacy@myteam365.ai
General support: support@myteam365.ai
Data deletion requests: privacy@myteam365.ai
MyTeam365
Virginia, United States