Privacy Policy

Effective Date: February 24, 2026

Last Updated: March 30, 2026

Action State Group, Inc. (“Action State,” “we,” “us,” or “our”) operates GetGopher, an AI-driven conversational business assistant. This Privacy Policy explains how we collect, use, and protect your information across our website, mobile application, email and SMS services.

1. Information We Collect

• Directly Provided Information: Account details (name, email, phone number) and content of your conversations with the GetGopher AI.
• Contact Information: If you grant access, we process contact details to help you manage your network via the AI agent.
• Automated Data: IP addresses, device identifiers, and usage logs via cookies and similar technologies.
• Google Account Data: If you connect your Google account, we access the following data through Google’s OAuth authorization:

• Gmail (read access): We read your email messages to compile morning briefings, triage your inbox, track follow-ups, and understand your business relationships and communication history.
• Gmail (draft/insert access): We create draft emails in your Gmail account for your review and approval before sending. GetGopher never sends email on your behalf without your explicit approval.
• Google Drive (file access): We create and read files within a designated “Gopher” folder in your Google Drive to store workspace documents, notes, and reports generated by your assistant.
• Google Calendar (read access): We read your calendar events to coordinate scheduling, detect conflicts, and include upcoming commitments in your briefings.

2. How We Use Your Information

We use your data to provide, maintain, and improve the GetGopher service, including:

• Facilitating AI-driven conversations and task management.
• Sending transactional SMS notifications (opt-in required).
• Service Improvement: We may use de-identified, aggregated conversation data to train and refine our service. You may opt-out of this in your account settings.

Google Account Data Usage: Data accessed from your Google account (Gmail, Drive, Calendar) is used solely to provide the GetGopher service as described above. Specifically:

• Email content is read server-side via Google’s API to generate briefings, draft replies, and track your business communications.
• Calendar data is read to provide scheduling coordination and conflict detection.
• Drive data is used to sync your assistant’s workspace files.

We do not use Google account data for advertising, market research, or any purpose unrelated to providing the GetGopher service.

3. SMS and Mobile Data — GetGopher Messaging Program

Mobile Information Privacy: Action State Group, Inc. is committed to protecting your mobile privacy. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Consent: You consent to receive SMS messages from the GetGopher Messaging Program by replying YES to our welcome message or by clicking “Text Hello to start” at getgopher.ai/sms-consent. You may view the full consent terms at getgopher.ai/sms-consent.

Message Frequency: Transactional message frequency varies based on your usage. Promotional messages are sent no more than 4 times per month.

Rates: Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

Opt-Out: Text STOP to 1-218-438-4674 at any time to unsubscribe from all messages. Text STOP PROMO to opt out of promotional messages only without affecting your assistant service.

Support: Text HELP to 1-218-438-4674 or email support@getgopher.ai.

4. AI & Automated Decision Making

GetGopher uses Large Language Models (LLMs) to process requests.

• Human Oversight: Our AI does not make "consequential decisions" (e.g., credit, housing, or employment) without human intervention.
• Transparency: Users are informed when they are interacting with an AI agent rather than a human representative.

5. Data Sharing & Third Parties

We do not sell your personal data. We share data only with:

• Service Providers: Cloud hosting (DigitalOcean, Google Cloud), AI inference (OpenAI, Anthropic), and communication platforms (Twilio) strictly for service delivery.
• Legal Compliance: When required by law or to protect our legal rights.

Google Account Data Sharing: Data obtained through Google APIs is not shared with any third parties except as strictly necessary for service delivery (e.g., passing email content to an AI inference provider to generate a draft reply). We do not share Google user data with third parties for their independent use. We do not allow humans to read your Google data unless you provide affirmative consent for specific messages, it is necessary for security purposes or to comply with applicable law, or the data has been aggregated and anonymized such that it can no longer be associated with you.

5a. Google API Services — Limited Use Disclosure

GetGopher’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This means:

• We only use Google data to provide and improve the GetGopher service.
• We do not transfer Google data to third parties except as necessary to provide the service, as required by law, or in a merger/acquisition with notice to users.
• We do not use Google data for advertising or to serve ads.
• We do not allow humans to read Google data except with your consent, for security/abuse investigation, for legal compliance, or when aggregated and anonymized.

6. Your Rights (GDPR/CCPA/CPRA)

Depending on your location, you have the right to:

• Access & Export: Request a copy of your data.
• Deletion: Request "the right to be forgotten."
• Opt-Out of AI Training: Limit the use of your data for model refinement.
• Opt-Out of SMS: Text STOP to 1-218-438-4674 at any time to cease all mobile communications. Text STOP PROMO to opt out of promotional messages only.
• Google Account Data Deletion: You may revoke GetGopher’s access to your Google account at any time through your Google Account permissions page. Upon revocation, we will cease accessing your Google data. You may also request deletion of any Google-derived data stored on our servers by emailing privacy@getgopher.ai. We will process deletion requests within 30 days. Stored data includes encrypted OAuth tokens and any cached workspace files; we do not retain copies of your email content or calendar data beyond what is needed for active processing.

6a. Data Storage & Infrastructure

• OAuth Tokens: Your Google OAuth refresh tokens are encrypted using Fernet symmetric encryption and stored in Google Cloud Firestore.
• Email & Calendar Data: Accessed in real-time via Google APIs from your dedicated, isolated server instance. We do not maintain a persistent copy of your Gmail messages or calendar events.
• Drive Files: Workspace files are synced between your dedicated server and your Google Drive “Gopher” folder using Google’s Drive API.
• Server Isolation: Each GetGopher user operates on a dedicated, isolated server instance. Your data is never co-mingled with other users’ data.
• Encryption: All data in transit is encrypted via TLS. Stored credentials are encrypted at rest using AES-256 / Fernet encryption.

7. Security

We implement industry-standard encryption (AES-256 / Fernet) for data at rest and TLS for data in transit. AI processing occurs in secure, sandboxed environments. Each user’s assistant operates on a dedicated, isolated server instance, ensuring no data co-mingling between users.

8. Contact Us

For questions or Data Subject Access Requests (DSAR), contact us at:

Email: privacy@getgopher.ai

Address: Action State Group, Inc., 672 28th Street, San Francisco, CA 94131