Aero Privacy Policy

2.1 LinkedIn Member Data (if you authorize it)

If you choose to connect your LinkedIn account, we may access certain information via LinkedIn's Member Data Portability API. This may include your LinkedIn profile, work history, and first-degree connections. We only access this data if and when you grant explicit permission via LinkedIn's OAuth process.

2.2 Gmail and Google Account Data (if you authorize it)

If you choose to connect your Google account, Aero may access your Gmail, Calendar, and basic Google profile information through Google's OAuth APIs. This data helps us power key features such as:

• Auto-creation of people and companies in Aero based on email data
• Viewing and organizing your Gmail messages in context (e.g., by company or contact)
• Associating calendar events with companies and people in Aero
• Enabling workspace features that rely on your historical communications

We only access this data if and when you grant explicit permission through Google's secure OAuth process. Specifically, we may access:

• Your Gmail email address and Google profile info (e.g., name, avatar)
• Gmail message metadata (e.g., subject line, sender/recipient, timestamp)
• Gmail message content and attachments (used solely to contextualize your interactions within Aero)
• Calendar event metadata and event details, including attached files or invites

User Controls

• You may choose to limit access to metadata only or grant Aero access to message bodies, attachments, and calendar event details for richer CRM functionality.
• You may revoke access at any time through your Google Account Permissions.

2.3 Limited Use Compliance (Gmail and Calendar Data)

Aero's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We do not use Gmail or Calendar data for advertising, profiling, or any unrelated purposes.
• We only access, use, store, or share Gmail and Calendar data as necessary to provide features that are visible and accessible within Aero's user interface.
• Gmail and Calendar data are processed only on the basis of your explicit consent via OAuth, not on the basis of legitimate interests.

You may configure Aero's privacy settings to:

• Keep email/calendar content private while sharing only metadata
• Blocklist senders, recipients, or domains
• Exclude specific calendar events from syncing

2.4 Microsoft Account Data (if you authorize it)

If you choose to connect your Microsoft account, Aero may access certain information through Microsoft's secure OAuth APIs. Specifically, we may access:

• Your Microsoft email address and basic profile information (e.g., name, avatar)
• Microsoft account ID or tenant ID (used to uniquely identify your account)

We only access this data if and when you grant explicit permission via Microsoft's OAuth process.

Use of Microsoft Account Data

• To authenticate you and allow you to log in to Aero using your Microsoft credentials
• To associate your Aero account with your Microsoft account for ongoing access
• To personalize your workspace (e.g., showing your name and email address)

User Controls

• You may revoke Aero's access at any time through your Microsoft Account permissions.
• Revoking access will stop all new data flow, and Aero will delete previously stored Microsoft account data in accordance with our retention policy, unless retention is legally required.

Data Protections

• We do not receive or store your Microsoft login credentials (such as your password).
• We only receive tokens that confirm your identity and allow access, consistent with Microsoft's security requirements.
• Microsoft account data is never shared with third parties, resold, or used for advertising.

2.5 Microsoft Mail and Calendar Data (if you authorize it)

If you choose to connect your Microsoft account, Aero may access your Outlook Mail, Calendar, and basic Microsoft profile information through Microsoft's secure OAuth and Graph API. This data helps us power key CRM features such as:

• Auto-creation of people and companies in Aero based on email data
• Viewing and organizing your Outlook messages in context (e.g., by company or contact)
• Associating calendar events with companies and people in Aero
• Enabling workspace features that rely on your historical communications

We only access this data if and when you grant explicit permission through Microsoft's secure OAuth process. Specifically, we may access:

• Your Microsoft email address and profile info (e.g., name, avatar)
• Outlook Mail metadata (e.g., subject line, sender/recipient, timestamp)
• Outlook Mail content and attachments (used solely to contextualize your interactions within Aero)
• Calendar event metadata and event details, including attached files or invites

User Controls

• You may choose to limit access to metadata only or grant Aero access to message bodies, attachments, and calendar event details for richer CRM functionality.
• You may revoke access at any time through your Microsoft Account Permissions.
• Revoking access will stop all new data flow, and Aero will delete previously stored Microsoft Mail/Calendar data in accordance with our retention policy, unless retention is legally required.

Data Protections

• We do not use Outlook Mail or Calendar data for advertising, profiling, or unrelated purposes.
• We only access, use, store, or share Outlook Mail and Calendar data as necessary to provide features that are visible and accessible within Aero's user interface.
• Outlook Mail and Calendar data are processed only on the basis of your explicit consent via OAuth, not on the basis of legitimate interests.
• Microsoft Mail and Calendar data are encrypted in transit and at rest. Human access to this data is strictly prohibited except (a) with your explicit consent for troubleshooting, or (b) when required by law. All such access is logged and monitored.