Privacy policy
Penny is made by one-tap LLC ("one-tap," "we," "us"). This policy explains what Penny can see, what she does with it, and what we keep. The short version: your email stays in your Google account, we run no servers for Penny, and nothing of yours is used to train AI.
1. How Penny works
Penny has two parts, and both run in accounts you own:
- The Penny add-on for Google Sheets. It lives in your Penny spreadsheet and runs on Google's servers under your Google account. It turns the replies planned in your spreadsheet into Gmail drafts and emails you your morning brief.
- Penny's rules in your own AI assistant (today, Claude). Your assistant reads your email and calendar through the connectors you set up in it, decides what goes in your brief and drafts, and writes those into your Penny spreadsheet. That reading happens in your assistant account, under its provider's own terms and privacy policy (for Claude: Anthropic). The Penny add-on never sends your Google data to your assistant, to one-tap, or to anyone else.
2. Google data the add-on uses, and why
| Permission | What Penny does with it |
|---|---|
| Gmail drafts (gmail.compose) | Creates reply drafts and updates them when you change the reply in your spreadsheet. Penny never sends them; you do. |
| Read Gmail (gmail.readonly) | Reads only the headers (From, To, Cc, Subject and message IDs) of the conversation you're replying to, so the draft lands in the right thread with the right people; and your own addresses and Gmail signature, so drafts end with your signature. Penny does not read the text of your messages. |
| This spreadsheet (spreadsheets.currentonly) | Reads and updates your Penny spreadsheet only. |
| Send email as you (script.send_mail) | Sends your morning brief to you, and only to you. |
| Run when you're away (script.scriptapp) | Sets up Penny's hourly and on-change timers so drafts are ready before you start. |
| Your email address (userinfo.email) | Makes sure your brief goes to you. |
3. Limited Use
Penny's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- Google user data is used only to provide the features described above, which you can see and control.
- We do not transfer it to anyone, except as needed to provide those features, to comply with the law, or as part of a merger or sale with your notice.
- We never use it for advertising, never sell it, and never use it to build, train or improve AI or machine-learning models, ours or anyone else's.
- No person at one-tap reads it, unless you ask us to (for example, by sending us a support request), it's needed for security, such as investigating abuse, or the law requires it.
4. What we keep about you
Penny's data lives in your own Gmail and your own Penny spreadsheet. We keep only what we need to run your plan:
- your name, company and email address, and how many people are on your plan;
- your team key, stored only in a scrambled form we can check but can't read, and whether it's active;
- billing records;
- anything you choose to send us, such as a support email or the Support code from your Settings tab.
5. Error logs
If a Penny run fails (for example, a draft couldn't be found), Google records the error message in one-tap's Google Cloud project so we can fix the problem. These are short technical notes. They can include an email thread ID, part of a link from a draft, or an email address; they never include the text of your emails. Google deletes them after 30 days, and only one-tap's owners can see them.
6. Sharing
We don't sell or share your data. Google provides the infrastructure Penny runs on, under Google's terms. We may disclose the information we keep (section 4) if the law requires it.
7. Keeping and deleting
- Stop Penny any time: remove the add-on (Extensions > Add-ons > Manage add-ons) or delete your Penny spreadsheet. Your drafts and briefs stay in your Gmail until you delete them.
- To revoke Penny's access to your Google account: https://myaccount.google.com/permissions
- When your plan ends, we delete what we keep about you within 30 days, except billing records the law requires us to keep. To have it deleted sooner, email hello@one-tap.gg.
8. Security
Penny's code runs on Google's servers and talks to Gmail only through Google's own services, over encrypted connections. Access to our Google Cloud project is limited to one-tap's owners, with two-step verification. To report a security issue, email security@one-tap.gg.
9. Children
Penny is for work use and not for children under 16.
10. Changes and contact
If we change this policy, we'll update the date above, and tell you by email before any change that affects how your Google data is used. Questions: hello@one-tap.gg. one-tap LLC, Los Angeles, California.