GSearchAI Privacy Policy
This Privacy Policy details how GSearchAI collects, uses, processes, stores, and protects data when using the GSearchAI platform and third-party integrations, including our Slack App and Google Drive connector.
1. Introduction & Scope
GSearchAI (a product operated by Gramosoft Private Limited) is an enterprise AI search and knowledge intelligence platform. Our platform enables organizations to index, query, analyze, and retrieve information across their connected workplace tools and databases using natural language.
This Privacy Policy applies to all individuals and organizations that interact with our website, software platform, web dashboard, APIs, and connected third-party integrations, specifically including the GSearchAI Slack Application and Google Drive Connector.
We are committed to maintaining the highest level of privacy and data security. We do not sell your personal data or your organization's data, and we do not use your proprietary documents or chat discussions to train generalized or public AI models.
2. Slack App Data Handling, Collection & Use
When your workspace administrator installs the GSearchAI app to a Slack workspace or when team members interact with the app in Slack, GSearchAI receives and processes limited third-party data required to provide the search and assistance service.
A. What Data is Collected from Slack
GSearchAI only collects information strictly necessary to authenticate your workspace, verify authorizations, and execute AI search queries:
- Workspace & Team Identifiers: Slack Team ID (
team_id), Team Name, and Team Domain to route queries to your organization's designated agent and knowledge base. - Channel Metadata: Channel ID and Channel Name for public or private channels where the bot has been explicitly invited (via
/invite @GSearchAI) or selected in the integration configuration. - User Identifiers: Slack User ID (
user_id) and Username of the person invoking a search or sending a prompt, used to verify role-based access permissions and respond in thread context. - Query & Prompt Content: The text content of messages explicitly addressed to
@GSearchAI, direct messages sent to the bot, or search terms entered through the/gsearchslash command. - OAuth Credentials: Encrypted bot access tokens provided by Slack during the OAuth 2.0 installation flow, stored with AES-256 encryption.
B. How the Collected Data is Used
Data collected from Slack is used exclusively to:
- Authenticate and route requests between Slack and your configured GSearchAI knowledge agent.
- Perform semantic vector search across your authorized connectors (e.g., Google Drive, Confluence, Jira, Notion) matching the user's query.
- Generate concise, citation-backed answers with verifiable document links and post them back into the Slack channel, thread, or direct message via Slack Block Kit.
- Enforce permission boundaries so users only see search results from documents they are authorized to access.
Zero AI / LLM Model Training Guarantee
GSearchAI never uses Slack messages, user prompts, channel discussions, or returned search results to train, fine-tune, or evaluate generalized foundation or third-party artificial intelligence models. Your data remains strictly private to your tenant.
3. Data Received But Not Used (Passthrough & System Logging)
When interacting with third-party APIs such as Slack or Google, our web servers receive standard protocol payloads and technical metadata that pass through our infrastructure.
Passthrough Payloads & Metadata Received:
Slack slash command payloads, interactive Block Kit actions, and webhook events inherently include auxiliary parameters such as trigger_id, response_url, api_app_id, enterprise_id, internal request timestamps, IP addresses, and HTTP user-agent headers.
Our Explicit Commitment Regarding Unused Data:
While this technical data passes through our services during standard HTTPS transmission, GSearchAI does not store, profile, track, aggregate, or monetize this auxiliary information. It is processed ephemerally in active memory solely to complete the immediate Slack API request cycle. Technical system logs maintained for server performance and cybersecurity are stripped of sensitive message content and automatically overwritten on a rolling 30-day schedule.
Google API Services User Data Policy Compliance
GSearchAI's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Google Drive Data Access, Storage & Protection
When you connect Google Drive to GSearchAI, our platform accesses file metadata (file names, IDs, MIME types, timestamps) and document content (Google Docs, PDFs, Word, Excel, CSV files) only for files you explicitly select or make available for indexing.
- GSearchAI does not sell Google user data.
- GSearchAI does not use Google user data to train, fine-tune, or develop generalized AI/ML models.
- OAuth tokens are protected with AES-256 encryption and TLS 1.3 transmission.
5. How Long Data is Kept (Data Retention Timelines)
We apply strict data minimization principles to ensure information is retained only as long as necessary to provide the services requested:
Slack queries and generated answers are held ephemerally in active memory during processing and are not stored in permanent log databases for model mining.
Vector embeddings and document chunks are retained only for the active lifespan of the associated GSearchAI workspace or customer account.
Stored encrypted for the duration of the integration. Immediately revoked and purged when an admin disconnects the Slack app or Google Drive integration.
System diagnostic logs and HTTP error codes are automatically purged on a rolling 30-day lifecycle.
6. How an Individual Can Request Access, Transfer, or Deletion of Data
Regardless of your geographic location, GSearchAI honors global privacy principles aligned with the European General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and applicable national privacy statutes.
Your Data Privacy Rights Include:
- Right to Access: You can request a confirmation of whether we process your data and receive a copy of your personal data.
- Right to Data Portability (Transfer): You can request to receive your stored data in a structured, commonly used, and machine-readable format (JSON or CSV).
- Right to Deletion / Erasure: You can request complete erasure of your account, indexed documents, chat interactions, vector embeddings, and OAuth tokens from our servers.
- Right to Disconnect: You can revoke third-party app access at any time through self-service dashboards.
Immediate Self-Service Disconnection:
For Slack: Administrators can remove the app directly via your Slack workspace settings (Slack > Manage Apps > GSearchAI > Remove App) or in the GSearchAI Dashboard under Integrations > Slack > Disconnect. This immediately invalidates the bot token.
For Google Drive: Disconnect in the GSearchAI Dashboard or via your Google Account permissions page at myaccount.google.com/permissions.
7. How to Contact Us to Exercise Your Data Rights
To submit a formal request to access, download, transfer, or permanently delete your data, please use any of our electronic communication channels below. We verify each request to protect your security and respond within 30 calendar days (or 48 hours for immediate disconnection confirmations).
Submit data requests directly via our web portal.