This policy explains what data Kiberflow (https://kiberflow.app) collects, how it is used, who it is shared with, and how it is retained and deleted. Kiberflow is operated by Kibernetika Inc., 806 E Homestead Rd, Sunnyvale, CA 94087, USA ("we", "us"). Questions: privacy@kibernetika.ai.
Kiberflow is a workspace where users converse with an AI assistant. The assistant can be connected to third-party services so it can answer questions using data from those services. Connecting any such service is optional and is initiated by the user.
Account identifiers (name, email address, organization), authentication data, workspace and chat content you create, uploaded files, and operational logs and metrics needed to run and secure the service.
We access Google user data only when you explicitly connect a Google connector and grant consent through Google's OAuth screen. Each connector is connected per user; no connector is enabled by default. We request the narrowest scopes that support the feature:
| Connector | Scopes requested | What we access and why |
|---|---|---|
| Gmail | gmail.modify, gmail.compose, gmail.drafts |
Read message and thread content so the assistant can answer your questions about your mail, organise mail with labels, and mark mail as read when you ask it to. It can create and update drafts, attach files you uploaded in the same conversation to a draft, and send a draft on your behalf. Sending always requires your explicit confirmation in the chat, which names the recipient, subject and sending account before anything leaves your mailbox. These scopes also permit deleting drafts; they do not permit permanently deleting your sent or received messages and threads. |
| Google Calendar | calendar.calendarlist.readonly, calendar.events,
calendar.events.freebusy |
Read your calendar list, events and free/busy information so the assistant can answer scheduling questions, and create, update, delete or respond to events when you ask it to. |
| Google Drive | drive.readonly, drive.file |
Search and read file content so the assistant can answer questions about your documents, and create or modify files when you ask it to. Write access is limited to files the assistant itself created and files you explicitly open with it; it cannot modify the rest of your Drive. |
Google user data is used for one purpose: to provide the user-facing assistant features you invoke in the Kiberflow interface. When you ask a question that requires it, the assistant retrieves the relevant data, uses it to compose an answer, and shows you that answer. We do not use Google user data for any other purpose.
To generate a response, the retrieved content is sent to the AI model provider configured for your workspace. Depending on that configuration, the provider is Anthropic, OpenAI, Microsoft Azure OpenAI, or Google. Providers process this content solely to return a response to your request, under their API terms, and do not use it to train their models.
We also use infrastructure providers (hosting, managed databases, error monitoring) that may process this data incidentally while it is stored or transmitted. We do not sell Google user data, transfer it to data brokers or advertising platforms, or use it to serve advertising or to determine creditworthiness.
Kiberflow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
OAuth access and refresh tokens are encrypted at rest. A Google connector is always connected per user: your tokens, and the data they reach, are never shared with other members of your workspace or with your workspace administrators. Data in transit is protected with TLS. Access to production systems is restricted to personnel who need it and is logged.
Content retrieved from a Google connector appears in the chat where you requested it and is stored as part of that chat's history so the conversation remains readable. It is retained until you delete the chat, your workspace, or your account, after which it is removed from active systems within 30 days and from backups within 30 days. OAuth tokens are retained until you disconnect the connector or delete your account.
Kiberflow is not directed to children under 18 and we do not knowingly collect their personal data.
We process data in the United States. Where data is transferred internationally, we rely on the Standard Contractual Clauses approved by the European Commission.
If we change how Kiberflow uses Google user data, we will update this page and notify affected users before the change takes effect.
Kibernetika Inc., 806 E Homestead Rd, Sunnyvale, CA 94087, USA · privacy@kibernetika.ai