Privacy Policy

Effective date: September 1, 2026

BrightHill Email Assistant (“the Application”) is a private email-productivity automation operated by BrightHill Capital for its authorized user. This Privacy Policy explains how the Application accesses, uses, stores, and protects information obtained through Google and other connected services.

Information the Application accesses

With the user’s authorization, the Application may access:

  • Gmail messages, message metadata, labels, and draft folders.

  • Google Calendar calendars and events.

  • Information from connected Microsoft Outlook and Apple iCloud email accounts.

  • Task information submitted to Todoist.

  • Email content necessary to classify messages and prepare draft responses, tasks, or calendar events.

The Application does not request access to information beyond what is reasonably necessary to provide these functions.

How information is used

The Application uses authorized information exclusively to:

  • Review new emails and identify newsletters, advertisements, actionable messages, calendar events, and informational messages.

  • Move newsletters and advertisements to designated folders or labels.

  • Create email drafts when a response appears necessary.

  • Create Todoist tasks from actionable messages.

  • Create calendar events when an email contains sufficiently definite scheduling information.

  • Mark successfully processed messages as read.

  • Prevent duplicate processing and maintain the automation.

The Application does not automatically send email replies. It creates drafts for review by the authorized user.

Artificial intelligence processing

Relevant email content may be transmitted securely to OpenAI for classification and preparation of draft text, tasks, or calendar-event details. Only information reasonably necessary for these functions is submitted.

Storage and security

The Application is hosted on a private n8n server controlled by BrightHill Capital. OAuth credentials and service credentials are stored in the server’s encrypted credential system. Reasonable administrative, technical, and organizational safeguards are used to protect information from unauthorized access, loss, misuse, or disclosure.

The Application is not intended to serve as a permanent email-storage system. Original messages remain with their respective email providers. Temporary workflow and execution information may be retained for operational troubleshooting and may be deleted according to server-retention settings.

Sharing of information

Information is not sold, rented, or used for advertising.

Information may be transmitted only to service providers needed to perform the requested automation, including Google, Microsoft, Apple, Todoist, OpenAI, n8n, and the Application’s cloud-hosting provider. These providers process information under their respective terms and privacy policies.

Information may also be disclosed if required by law or reasonably necessary to protect the Application, its operator, or its authorized user.

Google API data

The Application’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

Google user data is used only to provide and improve the user-facing email, task, draft, and calendar automation described in this Privacy Policy. Google user data is not used for targeted advertising, sold to third parties, or transferred for purposes unrelated to providing the Application’s functionality.

Data retention and deletion

The authorized user may stop further access at any time by disconnecting the relevant credential in n8n or revoking the Application’s access from the provider’s account-security settings.

The user may request deletion of information stored by the Application by contacting the address below. Requests will be processed within a reasonable period, subject to legal, security, backup, and operational requirements.

Children’s privacy

The Application is a private business-productivity tool and is not directed to children under 13.

Changes to this policy

This Privacy Policy may be updated when the Application, connected services, or legal requirements change. The effective date above will be revised when material changes are published.

Contact

Questions, access requests, or deletion requests may be sent to:

BrightHill Capital
Email: josemarbarrionuevo@gmail.com