Your information, your choices

Account and conversation data

We use the email address or phone number you provide to identify and secure your account. Passwords are stored as one-way hashes. Recordings, transcripts, summaries and reviewed actions are processed to provide the features you request. Recording requires your action and the necessary permission.

Google sign-in and optional connections

Google sign-in uses basic identity information. Connecting Gmail, Calendar or Contacts is a separate, optional consent step. You can use Nabz without connecting these services.

Gmail requests send-only permission to send messages you explicitly approve. It does not grant Nabz permission to read your inbox. Calendar permissions support listing calendars and working with events; Contacts permission supports finding contact details for the workflows you request. Sending an email or creating an event requires a separate action approval in Nabz.

We store the connected Google account identifier, granted permissions and a refresh credential so the authorized connection can continue to work. Approved action details and provider receipts are stored as operation history.

Service providers

Depending on the feature and selected provider, audio or text is sent to the speech or AI service used to fulfil your request. Google receives requests for the connected actions you approve. Connecting Google does not grant those services access to all of your Nabz recordings.

Access, disconnection and deletion

You can review and correct transcripts and use the export and removal controls available in the app. Disconnecting a connection in Nabz stops its future use by Nabz; it does not automatically erase previously saved drafts, action records or provider receipts. You can also remove Google authorization in your Google Account connections.

For account-data access or deletion requests, contact privacy@nabzlab.com. Disconnection and deletion are separate actions. Requests to remove stored credentials, conversation data or operation records require a separate review of the affected data.

Product boundaries

The pilot is not a medical diagnosis, treatment or emergency-response service. Do not record another person without the permission required for your situation.