Privacy Policy

Effective date: August 20, 2026

Ambit is a PivotPointAI product that helps users work across Google accounts they explicitly connect. This policy explains how Ambit handles account information and Google user data.

Information Ambit accesses

Depending on the permissions a user grants, Ambit may access Google account identity information and data from Gmail, Google Calendar, and Google Drive. Access is limited to the connected account and capabilities the user authorizes.

How information is used

Ambit uses Google user data only to provide user-requested functionality, such as searching email, reading messages, retrieving attachments, understanding calendars and availability, finding Drive files, retrieving file content on demand, preparing Gmail drafts, or carrying out explicitly approved calendar or file actions where available.

Storage and retention

Google remains authoritative for messages, calendars, and Drive files. Ambit is designed not to create permanent replicas of Gmail message bodies, attachment bodies, Drive file bodies, or complete calendar content. Ambit may store encrypted OAuth credentials, connection metadata, account identifiers, native Google object identifiers, capability state, action receipts, and limited operational metadata needed to provide and secure the service.

Sharing

Ambit does not sell Google user data. Google user data is not shared with advertisers. Data may be processed by infrastructure providers strictly as necessary to operate the service, secure it, and fulfill the user-requested functions described above.

Security

OAuth refresh credentials are stored encrypted. Ambit scopes requests to the authenticated user/workspace and preserves source-account provenance to reduce wrong-account actions. Short-lived access patterns are used for on-demand attachment and file retrieval where appropriate.

Google API Services User Data Policy

Ambit's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

User control

Users can disconnect connected Google accounts. Disconnecting stops future access through that connection and the service attempts to revoke the relevant Google authorization where supported.

Contact

Questions about this policy can be sent to pivotpointapps@gmail.com.