Last updated: March 28, 2026
Gonga Inc. ("Gonga", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Gonga platform and related services (the "Service").
When you connect third-party services (such as QuickBooks Online, Gmail, Google Drive, Shopify, or Lightspeed), we collect data from those services that you authorize us to access. This may include:
We only access the data necessary to provide the features you use. You can disconnect any integration at any time, and we will stop collecting new data from that service.
We use your information to:
We implement a per-customer infrastructure isolation model. Each customer organization receives dedicated compute and storage resources, ensuring complete data isolation at the infrastructure level. Your data is never commingled with other customers' data.
We employ industry-standard security measures, including encryption in transit (TLS) and at rest, access controls, and regular security audits to protect your information.
We do not sell your personal information. We may share your information only in the following circumstances:
We do not use your data — including data obtained from third-party integrations — for advertising, retargeting, or serving personalized ads. We do not use your data to make credit-worthiness or lending determinations. We do not sell your data to data brokers or information resellers.
This section describes how Gonga accesses, uses, stores, and shares data obtained through Google API Services. It applies to all information received from Google APIs, including data from Gmail, Google Contacts, and Google Drive.
Gonga requests the following Google OAuth scopes:
| Scope | Purpose |
|---|---|
| gmail.modify | Read, compose, send, archive, label, and trash emails on the user's behalf within Gonga |
| userinfo.email | Identify the user's Google account email for authentication and account linking |
| contacts.readonly | Read the user's saved contacts for autocomplete when composing emails within Gonga |
| contacts.other.readonly | Read "other contacts" (people the user has interacted with) for more comprehensive autocomplete |
Gonga accesses Google user data in real time when you use Google-connected features within the Service (e.g., viewing your inbox, sending an email, or looking up a contact). There is no background bulk synchronization or batch downloading of your Google data.
Google user data is used exclusively to provide the following user-facing features:
Google user data may be shared only with the following categories of recipients, and only as necessary to provide user-facing features:
Gonga does not share Google user data with:
When you use AI-powered features (such as email summaries or suggested replies), the relevant email content is sent to Anthropic's Claude API for real-time inference. Anthropic is contractually prohibited from retaining, logging, or using this data to train or fine-tune any machine-learning model. No sub-processor of Gonga uses Google user data for AI/ML model training or improvement.
Gonga's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google user data is transferred to third parties only when:
All transfers are protected by TLS 1.2 or higher in transit. For international data transfers, Gonga relies on Standard Contractual Clauses (SCCs) approved by the European Commission where applicable.
You can revoke Gonga's access to your Google account at any time using either of the following methods:
Upon revocation, Gonga will immediately stop accessing your Google data. Any cached metadata will be purged from our systems within 30 days.
The Service integrates with third-party platforms. When you authorize an integration, data flows between Gonga and the third-party service. Each third-party service has its own privacy policy, and we encourage you to review those policies. Gonga is not responsible for the privacy practices of third-party services.
OAuth tokens and credentials for third-party services are stored securely and used only to maintain your authorized connections. You can revoke access at any time through the Service or through the third-party service's settings.
We retain your data for as long as your account is active or as needed to provide the Service. Upon account termination, we will delete or anonymize your data within a reasonable period, unless retention is required by law. You may request deletion of your data at any time by contacting us.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, please contact us at support@gonga.ai.
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it.
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where applicable.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service or by email. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.
If you have any questions about this Privacy Policy or our data practices, please contact us at: