How we handle your data
Last updated: October 1, 2026. The legal version is the
Privacy Policy; this page says the same things in plain language.
The short version. Your assistant sees only the systems you connect, does only what you have approved, keeps your data on servers we control in Canada, and can be disconnected by you at any time. We never sell your data, never use it for advertising, and never use it to train AI models.
What your assistant can see
| If you connect | It can see | It cannot |
|---|
| Your CRM | Contacts, notes, tags, stages, activity | Change anything without a rule you approved |
| Your Gmail | Messages and attachments, to summarize and draft replies | Send, delete, archive, label or forward anything on its own |
| Your Google Calendar | Your events, to plan your day around them | Create, move or delete events |
| Texts with your assistant | What you and it say to each other | Text your contacts outside the rules you set |
You connect each of these yourself, from your own phone or computer, through that platform's own permission screen. We never ask for your passwords.
What it does with what it sees
- Prepares your brief: who to call, what came in, what needs a reply, what is on your calendar.
- Writes drafts for you to approve. A draft to one of your contacts goes out only when you say so, or under a standing rule you set in writing.
- Keeps records tidy: proposes tags, stages and notes, and applies them only under rules you approved.
- Answers your questions about your own business, from your own data.
What it never does
- Never sends money, signs anything, or acts on wire instructions. It can read a message that contains them; it cannot act on them.
- Never contacts anyone during their night time hours.
- Never sends a message that fails our automated check. Anything that fails is held and reviewed by a person before it can go anywhere.
- Never shares your data with anyone outside the services that run it, listed below.
Where your data lives
- Your assistant runs on servers we control in Toronto, Canada. Your records, its memory and its logs stay there.
- Connection keys for accounts you connect are kept in restricted files on those servers. They are not in a browser, not in a shared drive, and not given to contractors.
- The AI model that reads and writes for your assistant is provided by Anthropic under commercial terms that do not allow it to train on your data.
- Our website and the connection pages you tap run on Netlify. Billing runs through Stripe. Those services see only what they need for their job.
Who can see it
Your assistant and the automated checks around it. Beyond that, only Easyworks' founder, and only when a message is held for review, when you ask for support, or when a security issue needs investigating. Sales partners, assistants and contractors who work with Easyworks do not have access to your connected accounts or your mailbox.
Google verification
Google reviews apps that ask for Gmail access, and until that review is complete it shows a warning screen before you connect. We are completing that review now and we will not ask you to connect Gmail until Google has finished it. Your CRM and texting connections do not go through Google and are not affected.
How to disconnect
- Google: go to myaccount.google.com/permissions and remove Easyworks Assistant. We delete the stored connection and anything it kept from your mailbox within 30 days.
- Your CRM: remove the assistant's seat or integration from your CRM's team settings.
- Everything: email [email protected] with the subject "Disconnect" and we will shut the assistant down and return or delete your data within 30 days.
Questions
Ask us anything about this at [email protected]. If something here does not match what you experience, tell us and we will fix the system first and this page second.