Last updated: April 14, 2026
What we access
When you sign in with Google, UpSkiller AI requests read-only access to:
- Gmail (read-only) — We scan email sender domains and financial email content (invoices, receipts, subscriptions) to discover your tech stack and estimate costs.
- Google Drive (metadata only) — We read file names and modification dates to find contracts, SOWs, and procurement documents. We never read file contents.
- Google Calendar (read-only) — We analyze meeting patterns to identify vendor relationships and operational cadences.
What we don't do
- We never write to, modify, or delete anything in your Google account.
- We never store your email content, file contents, or calendar details on our servers.
- We never share your data with third parties.
- We never use your data for advertising or training AI models.
How data is processed
All data is processed in-memory during your scan session. Email content is analyzed by our AI (Claude by Anthropic) to produce findings, then immediately discarded. Only the scan results (findings, tech stack map, recommendations) are shown to you. Raw email data is never stored.
Authentication tokens
Your Google OAuth token is stored in a secure, httpOnly cookie that expires after 1 hour. It is only used to access the Google APIs listed above during your active scan session. Tokens are never logged or stored in any database.
Data retention
If you create an account, your scan results (findings and recommendations) are stored in our database so you can return to them later. Your raw email content is never stored. You can request deletion of your account and all associated data at any time by emailing scotty@upskillerai.com.
Third-party services
- Anthropic (Claude AI) — We send anonymized, summarized data to Claude for analysis. No raw email content is sent.
- Vercel — Our application is hosted on Vercel's serverless infrastructure.
- Supabase — Scan results are stored in Supabase (if you create an account).
Your rights
You can revoke UpSkiller's access to your Google account at any time by visiting Google Account Permissions. You can also request complete deletion of your data by contacting us.
Contact
Questions about this policy? Email scotty@upskillerai.com.