Privacy Policy
UFO ("UFO", "we", "us", or "our") is operated by Metalcraft Inc. This Privacy Policy explains how we collect, use, and protect information when you use our service.
1. Information We Collect
When you sign in with Google, we receive your basic Google profile information: your name,
email address, and profile picture (Google scopes userinfo.profile and
userinfo.email). Sign-in alone does not grant access to Google Workspace content. If you separately
connect Gmail, Drive, Docs, Sheets, Calendar, or Meet, we can receive the content and
metadata allowed by the permissions you approve. This can include messages, attachments,
files, document and spreadsheet content, events, meeting records, and authorization tokens.
The Google section below explains the data and actions involved.
When you use the service, we also collect usage information: the pages you open, the actions you take, your browser and device type, your IP address, and reports of errors you hit. This includes recordings of your sessions in the web portal. What you type into a field is masked in those recordings, and passwords are never recorded.
When you use UFO in Slack, we receive Slack messages, files, comments, profile information, metadata, and token data. This can include workspace, channel, thread, user, and app identifiers; names and email addresses; message text; files; reactions; timestamps; and authorization tokens. We receive this information when Slack sends an event or when UFO requests the context needed to answer.
Slack can include reactions and other fields that UFO does not use. We discard those unused fields after we process the Slack event.
2. How We Use Information
We use your Google profile information only to create and authenticate your account and to identify you within the service. We use usage information to operate the service, to find and fix faults, and to improve it.
We use Slack information to connect a Slack workspace to a UFO workspace, identify members, answer requests, keep conversation history, process files, secure the service, and provide support. We do not use Slack information for advertising or to contact Slack users outside the service.
We use connected Google data to answer your requests and perform tasks you authorize, including scheduled tasks. Content and results can be stored in conversations, files, and search or memory indexes to support that work.
3. AI Processing
UFO sends the Slack content and related context needed for a request to the model providers that process the request. We use this information only to provide and operate the service. We do not use Slack data to train an LLM.
Google content needed for a task can also be sent to model providers. Connection providers can process authorization tokens and API requests. The providers involved depend on the connected account and the features you use. We do not use Google user data to train general-purpose AI models.
4. Google API Services User Data Policy
The permissions you approve control the data UFO can access. Your requests control the work UFO performs, including tasks you schedule.
- Gmail: Find and read messages and attachments, prepare drafts, send messages, and manage messages and labels.
- Drive: Find, read, create, and update files and folders, and manage sharing when you request it.
- Docs and Sheets: Read, create, and edit documents and spreadsheets.
- Calendar: Read calendars and availability, and create or change events and invitations.
- Meet: Work with meeting spaces and available meeting records, participants, and transcripts. Recording files can require separate Drive access.
Availability depends on the connected service, your permissions, and your Google Workspace administrator's rules. A connection does not grant access to every service listed here.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data or use it for advertising. We limit its use and transfer to providing the features you authorize, security needs, and legal requirements. A transfer in a sale of the business requires your prior consent. Human access requires your specific consent, a security need, a legal requirement, or aggregated and anonymized data for internal operations.
5. Data Sharing
We do not sell your personal information. We share it with the service providers and subprocessors that operate the service on our behalf, and only for that purpose. We also share it where the law requires.
See the current Subprocessor List.
6. Data Retention and Your Choices
We retain your information while the related UFO workspace is active and as needed to provide the service. We may retain information for longer when the law requires it.
To request access, transfer, correction, or deletion of your data, email support@ufo.ai. We verify that you have authority over the requested user or workspace data before we complete the request.
Ask UFO in chat to disconnect a Google account. You can also revoke access in Google Account connections. Remove each connection app if you used more than one. Revocation stops further access through that grant. It does not delete content already stored in UFO conversations, files, or task results. Request deletion at the address above. We protect data with access controls and encryption in transit and at rest.
7. Children's Privacy
The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. UFO for Slack does not permit use by children under 16.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised effective date.
9. Contact Us
Metalcraft Inc2261 Market St STE 98045
San Francisco, CA 94114
Email: support@ufo.ai