Connected email privacy policy
Prime Meridian Labs, Inc. dba Prime Meridian provides the email features at connect.getprimemeridian.com. This policy explains how we access, use, share and delete Google user data for those features.
Google user data we access
For both connection types, we receive your Google account identifier and email address, the permissions you grant, and access tokens that authorize the connection.
Send only. We receive the recipients, subject, message body and attachments you enter, and Google's send result and message identifier. The gmail.send permission lets us send the email you approve. It does not let us read or search your inbox.
Read and send. In addition to the above, gmail.readonly lets us retrieve search results, email metadata such as sender, recipients, subject and date, selected message bodies, and attachments. We retrieve these when you search, open a message or select an attachment. We do not modify existing messages, labels, filters or settings.
How we use Google user data
We use this data to identify your connected account, find tax documents and financial correspondence you request, display selected messages and attachments, explain their contents, and send emails and attachments after you review and approve them. Connection status, send results and operational records support these features and troubleshooting.
For read-enabled users, the assistant retrieves the messages and attachments needed for their request. We use AI models within AWS with ZDR to process content. Only the selected message, selected attachment text and your question are sent for that analysis.
Who receives Google user data
Google authenticates your account, grants and revokes access, supplies requested Gmail data, and sends approved emails. Amazon Web Services (AWS) hosts our application and encrypted storage and processes selected content for AI inference through AWS Bedrock under an enforced zero-data-retention configuration. Vercel serves our website and proxies encrypted web requests and responses between your browser and the application. These infrastructure providers process data to provide their services to Prime Meridian.
Your chosen email recipients receive only the message and attachments you approve for sending. They do not receive access to your inbox. Prime Meridian personnel may access Google user data only with your affirmative permission for specific messages, where necessary for security or legal obligations, or in aggregated, anonymized form for internal operations permitted by Google's Limited Use requirements. We may disclose data when required by law.
No sale of Gmail data, no advertising use, and no use to train generalized AI/ML models. No Gmail content is sent to another model service. Prime Meridian's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Storage, security and deletion
While connected, we retain connection identity, credentials, status and operational history, user-approved outgoing messages and send results, and selected email content, attachments and derived work in this workspace. Data is encrypted in transit and at rest. This environment is separate from your Prime Meridian production workspace.
Disconnecting stops future Gmail API access through that connection and deletes its saved Google user data, including messages, attachments, drafts, analysis, operational history and connection credentials. A sent email remains in Gmail and the recipient's mailbox. You can also revoke access in your Google Account settings.
Sessions expire after 24 hours. Expired sessions and their saved Google user data are removed automatically. You can request deletion at any time by emailing help@getprimemeridian.com.
Contact
Questions about this policy can be sent to help@getprimemeridian.com. Our general privacy policy also applies. This policy governs Google user data handled by these connected email features.