Privacy Policy

Effective as of July 20, 2025

1. Introduction

This Privacy Policy describes how Mibo AI handles information provided by users when using the assistant via WhatsApp and connected services through Google Workspace APIs. We are committed to protecting the privacy and security of personal data in accordance with applicable regulations, including GDPR, Argentina's Law 25.326, and Google's policies.

2. Nature of the Service

Mibo is a digital assistant that interacts with users via WhatsApp and can connect to Google services such as Google Drive or Google Calendar to execute automated actions explicitly authorized by the user. The assistant's scope is limited to specific functionalities like saving files, checking events, and creating reminders.

3. What Data We Obtain via Google Workspace APIs

With the user's explicit consent through the OAuth 2.0 protocol, Mibo may request access to the following data. Each permission is used for a specific function: • https://www.googleapis.com/auth/userinfo.email – Access to your email address to uniquely identify you. • https://www.googleapis.com/auth/userinfo.profile – Access to your name and profile picture to personalize the experience. • https://www.googleapis.com/auth/calendar.events – Permission to create, read, modify, and delete events in your calendar, only upon your request. • https://www.googleapis.com/auth/calendar.readonly – Permission to read your calendar's settings (such as timezone) to ensure events are scheduled correctly. • https://www.googleapis.com/auth/drive.file – Permission to create and access only the files and folders that the user specifically creates or opens with Mibo. • https://www.googleapis.com/auth/drive.metadata.readonly – Permission to read the metadata (such as filenames and location) of all files in your Google Drive. This enables the search functionality from WhatsApp but does not give us access to the file content.

4. Use of Google Data

The data obtained from Google APIs is used exclusively to perform the actions requested by the user. For example: • We use your name and email to identify you and communicate with you. • We create or modify events in your calendar according to your instructions. • We save files you send us via WhatsApp to your Google Drive. • We help you search for existing files in your Drive by querying their names. It is crucial to highlight that this search is performed on metadata, and Mibo does not have access to the content of files it has not created. Mibo does not share, sell, or transfer this information to third parties under any circumstances, except as specified in section 5.

5. Data Sharing and Disclosure

Mibo does not sell, rent, or share personal information with third parties for commercial purposes. Data may be shared only with: • Sub-processors necessary for the service's operation (e.g., cloud services like AWS or AI tools like OpenAI). • Competent authorities, if required by law or a valid legal process.

6. Data Retention and Deletion

Mibo only retains the user's email address for authentication purposes. All other information obtained from Google (such as metadata search results or event content) is processed ephemerally and discarded after the operation is complete. We do not permanently store events, files, or content from Google services. The user can revoke access from their Google account at any time.

7. Third-Party Services

Mibo relies on services such as WhatsApp, OpenAI, Google, and cloud infrastructure providers. While we implement reasonable security measures, we do not control the privacy policies of these services.

8. Data Security

We apply reasonable technical and organizational measures to protect information, including: • Encrypted TLS/HTTPS connections • Secure OAuth tokens with expiration • Restricted access within the development team • Regular security audits and best practices

9. User Rights

The user can revoke the permissions granted to Mibo from their Google account's security settings at any time. Since we do not store personal data beyond the email, revoking permission is the most effective way to exercise control over the connection.

10. Changes to This Policy

We reserve the right to update this policy at any time. Modifications will be published at www.mibo-ai.com/privacy and will be effective upon their publication.

11. Contact

For any questions about this policy, you can write to us at: 📧 Email: info@mibo-ai.com