This policy explains what data the CorbieTech Suite tools ("the tools", "we") collect when you sign in with Google, how it is used, and how you can control it. The tools are operated by CorbieTech, Costa Rica ("CorbieTech"). Contact: info@kanucloud.com.
1. Data we receive when you sign in with Google
Signing in provides your Google account identifier, email address, name and profile picture. We use these only to create and identify your account in the tool and to show you your own data. We do not use them for advertising and we do not sell them.
2. Google user data accessed by specific tools
ALE (Agency Lead Enrichment) requests the gmail.readonly permission. With it, ALE:
- searches your mailbox using a filter you define (for example, notification emails from your CRM) and reads only the messages that match it;
- extracts the prospect's contact details from those messages and, using research services you configure with your own API keys, prepares a lead profile and score;
- stores the resulting lead records, your filter, and a record of which messages were already reviewed, so the same email is not processed twice.
ALE never sends, replies to, modifies, labels or deletes email — the permission it requests does not allow it to. Message contents are read to extract the prospect's details and are not stored in full; only the derived lead record is kept.
Other tools in the suite request their own permissions, which are listed on the Google consent screen for that tool. A tool cannot use data beyond the permissions shown there.
3. Limited Use disclosure
The tools' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is used only to provide the tool's user-facing feature, is not transferred to third parties except as needed to provide that feature, is not used for advertising, and is never read by humans except with your consent, for security purposes, or as required by law.
4. Third-party services that process data
To research a prospect, ALE sends the prospect's name, email address and phone number (never your mailbox contents) to research and validation services that you enable and configure with your own API keys — such as Anthropic (AI analysis), Tavily and Exa (web search), ZeroBounce (email validation), People Data Labs and Enrich Layer (professional enrichment). If you enable the optional Meta Conversions API feedback, only a one-way SHA-256 hash of the prospect's contact details and a "qualified" flag are sent to Meta. Each service processes data under its own terms; you choose which to enable.
The tools run on Amazon Web Services in the United States (us-east-1). Data is encrypted in transit and at rest.
5. Retention and deletion
Your account record, filter, API keys and lead records are kept for as long as you use the tool. You can remove any stored API key from the tool's settings at any time. To delete your account and all associated data, or to revoke the tool's access to your Google data, either revoke access at myaccount.google.com/permissions or email info@kanucloud.com; we delete the stored records within 30 days.
6. Security
Access tokens and API keys are stored encrypted and are never displayed back to you in full. Access to the systems is limited to CorbieTech operators who maintain the tools.
7. Changes
If this policy changes materially we will update the effective date above and, where a change affects how Google user data is handled, notify tool users.