Privacy

Switchboard ("we", "us") connects your AI client to the email, calendar, and file accounts you choose to link. This policy explains what we access, what we store, and what we never do. It covers the Switchboard service operated by Thalassis.

What we access

When you link a Google or Microsoft account, you grant access via OAuth — we never see or store your password. We request the minimum scopes required to provide the features you use: reading, organizing, drafting, and sending mail; viewing and managing calendar events and availability; and searching, reading, and creating files. We request these only for the accounts you explicitly connect.

What we store

• Your account identifiers (email address, provider) and the OAuth tokens needed to act for you, encrypted at rest.
• Minimal operational metadata — such as which account a request used — to make the service work and to keep an audit trail.

We do not store the bodies of your messages, events, or files. Content is fetched on demand to answer a request and is not retained on our servers afterward.

What we never do

• We never sell your data or share it with advertisers.
• We never send email, create events, or modify your data without an explicit action you approve.
• Each linked account is isolated to you; no other user can reach it.

Who we share with

Providing Switchboard requires sharing your content with a small set of processors, only as needed to deliver the features you use:

• Your AI client. Content you ask about — email, events, files — is returned to the AI client you connect (such as Claude or ChatGPT) so it can answer you. That client operates under its own terms.
• Messaging provider. For WhatsApp and LinkedIn features. If you attach a Google Drive or OneDrive file to a message you send, that file's contents are transmitted through this provider to deliver your message.
• Hosting and database provider. Stores your encrypted tokens and operational metadata.

We do not transfer your data to anyone else except to comply with the law or as part of a merger, acquisition, or sale of assets with notice to you. We never sell your data or use it for advertising.

Human access

We do not allow humans to read your Google or Microsoft data unless: (a) you give affirmative consent to view specific items; (b) it is necessary for security, such as investigating abuse; (c) it is required by law; or (d) the data has been aggregated and anonymized for internal operations. Diagnostic logs are designed to exclude message, file, and event contents.

Disconnecting

You can unlink any account at any time from your account page, which revokes our access. You may also revoke access directly from your Google or Microsoft security settings.

Contact

Questions about privacy? Reach us via thalassis.co.