1. Information We Collect

Account Information: When you create an account, we collect your name, email address, and profile picture. If you sign in with Google, we receive your basic profile information (name, email, profile photo) through Google's OpenID Connect.

Payment Information: When you purchase credits, your payment is processed by our third-party payment provider. We do not store your full credit card number or payment credentials.

Usage Data: We collect information about how you use the Service, including tasks you create, chat interactions, and session metadata. This data is used to provide and improve the Service.

Google Workspace Data: If you connect your Google account, we access data from Google Workspace APIs (Gmail, Drive, Calendar, Docs, Sheets, Tasks, Contacts) only as described in Section 3 below. We store only the OAuth tokens required to access these services on your behalf.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your transactions and manage your credit balance
• Authenticate your identity and manage your account
• Execute tasks and automations you initiate through the AI chat interface
• Access Google Workspace services on your behalf when you have connected your Google account
• Send you service-related communications (e.g., account verification, security alerts)
• Respond to your requests, comments, or questions

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

3. Google Workspace Integration

If you choose to connect your Google Workspace account, the Service requests access to the following Google API scopes. Each scope is used solely to enable the corresponding feature within the Service:

User-Initiated Access: All Google Workspace access is initiated by you. The Service only accesses your Google data when you explicitly request an action through the AI chat interface or configure an automated trigger.

Processing by AI Providers: When you request AI-assisted actions involving your Google Workspace data (e.g., summarizing emails, analyzing spreadsheets, drafting replies), the relevant Google data is sent to third-party AI model providers (such as Anthropic, OpenAI, Google Gemini, and other providers) solely to generate a response for your specific request. This data is transmitted in real-time and is not stored by the AI providers for training purposes. No Google Workspace data is shared with any other third parties.

Token Storage: We store your Google OAuth access and refresh tokens in our database, encrypted at rest using AES-256-GCM encryption. These tokens are used solely to authenticate API requests on your behalf.

No AI/ML Training: Data obtained through Google Workspace APIs is not used to develop, improve, or train generalized artificial intelligence or machine learning models.

Revoking Access: You can disconnect your Google account at any time through the Settings page, which revokes the Service's access. You can also revoke access directly from your Google Account permissions page.

Limited Use Disclosure: The Service's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Storage & Security

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission using HTTPS/TLS
• Isolated execution environments — tool execution (browser automation, file operations, integrations) runs in per-user containers that are not shared between users
• AES-256-GCM encryption at rest for stored OAuth tokens and sensitive credentials
• Access controls restricting who within our organization can access user data

While we strive to use commercially acceptable means to protect your data, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

5. Third-Party Services

The Service integrates with and may interact with third-party services, including:

• Google Workspace APIs — as described in Section 3
• AI Model Providers (such as Anthropic, OpenAI, Google Gemini, and other providers) — to power the AI chat and task automation features. When you request actions involving your connected services (e.g., Google Workspace), the relevant data is sent to these providers solely to fulfill your request
• Payment Processors — to process credit purchases
• Websites you automate — when you use browser automation, the Service interacts with third-party websites on your behalf
• Operational Monitoring — we use internal notification services to alert our team about system events such as new registrations and task execution status. These notifications may include account identifiers and usage metadata and are used solely for operational monitoring

Each third-party service has its own privacy policy. We encourage you to review the privacy policies of any third-party services you interact with through the Service. We are not responsible for the privacy practices of third-party services.

6. Data Retention & Deletion

We retain your personal information for as long as your account remains active or as needed to provide you with the Service.

Account Deletion: You can delete your account at any time through the self-service option in Settings → Delete Account. Upon deletion, all associated personal data — including stored OAuth tokens, chat history, task configurations, and files — will be permanently removed from our systems within 30 days. You may also contact us at navot@theranger.ai to request account deletion.

Session Data: Session execution environments (browser automation state, temporary execution files) are destroyed when your session ends. Chat messages and conversation history are retained in your account for your continued use. Operational logs may be retained for a limited period for debugging and service reliability purposes.

Google Data: You can disconnect your Google account at any time through Settings, which immediately revokes access and deletes your stored Google OAuth tokens. If you delete your Ranger account, Google tokens are also deleted as part of the account removal process. We do not retain copies of your Google Workspace data (emails, files, calendar events, etc.) beyond the duration of the specific action you requested.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your data
• Revoke Consent: Withdraw consent for data processing at any time, including disconnecting your Google account

To exercise any of these rights, please contact us at the email address below.

8. AI & Machine Learning

The Service uses third-party AI models to power its chat and automation features. Your chat messages and task descriptions are sent to AI model providers to generate responses and execute tasks.

Google Workspace Data and AI: Data obtained through Google Workspace APIs is not used to develop, improve, or train generalized AI and/or machine learning models. Google Workspace data is only processed in real-time to fulfill the specific action you requested.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Your continued use of the Service after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: