Privacy Policy

1. Introduction

We are committed to transparency about our data practices. Because our Service involves AI processing of your data, it is important that you understand what happens to the information you provide. This Policy applies to all users of the Service, including free-tier users, paid subscribers, Marketplace creators, and affiliate program participants.

2. Information We Collect

2.1 Account Information

When you register, we collect: name, email address, and password; profile information you choose to add; payment information for paid subscriptions (processed by our payment provider — we do not store full card numbers); and company or organization information if you create a company profile.

2.2 Content You Provide

When you use the Service, you may provide:

• Text content: Messages in sessions, personality prompts, knowledge source text, agenda items
• Documents: PDFs, Word documents, spreadsheets, text files uploaded as knowledge sources
• Images and photos: Uploaded for Teammate analysis, OCR processing, or as knowledge sources
• Audio and video recordings: Voice recordings, meeting recordings, and other audio/video files uploaded as knowledge sources. These may be transcribed using automated speech-to-text processing.
• Conversation exports: Email archives, text message exports, WhatsApp exports, and other communication data you choose to upload
• Handwritten materials: Photographs of handwritten notes, recipes, letters, or other documents processed through OCR

2.3 Data from Connected Services

With your explicit authorization, we access data from:

• Google Gmail / Microsoft Outlook (via IMAP): Email content and metadata to provide context for Teammate responses, accessed via IMAP using an app-specific password you provide
• Google Calendar: Schedule, events, and availability information
• Google Sheets / Google Docs / Google Slides: Spreadsheet, document, and presentation data for analysis and output
• Slack: Channel information for posting session summaries
• Dropbox / Google Drive / Box: Files and folders you choose to sync as knowledge sources
• Notion: Pages and databases you authorize
• GitHub: Repository information you authorize
• Monday.com: Project and task data you authorize
• tl;dv: Meeting recordings and transcripts you authorize
• Zapier: Workflow data as configured by you
• Facebook and Instagram (Meta): Your Facebook Pages, linked Instagram professional account, posts, comments, Messenger conversations with your Page, Page and Instagram insights, and — if you use advertising features — your ad accounts, campaigns, businesses, and product catalogs, accessed through Facebook Login with the permissions you grant (see Section 2.3.2)
• Google Ads, YouTube, and Merchant Center: Your Google Ads accounts, campaigns and performance data; uploads to your own YouTube channel; and your Merchant Center accounts and product listings, accessed with the Google scopes you grant (see Section 2.3.1)
• MyTeam365 for Chrome: Pages in your own Chrome browser that a task you started works on, on sites you approved (see Section 2.3.3)

We access ONLY the data and permissions you explicitly grant. You may revoke access to any connected service at any time through your account settings or through the respective third-party platform.

2.3.1 Google OAuth Scopes and Permissions

When you authorize MyTeam365 to access your Google account, we request the following OAuth scopes. Each is shown to you on Google's standard consent screen before you authorize.

Basic identity (always requested)

• userinfo.email — your primary Google Account email address
• userinfo.profile — your name and any publicly available profile information
• openid — associate the session with your Google identity

Google Drive — narrow file scope

• Scope: drive.file
• What this means: MyTeam365 can see, edit, create, and delete only the specific files you explicitly authorize through MyTeam365 or that MyTeam365 itself creates on your behalf.
• What we do NOT do: We cannot see, access, or enumerate any other files in your Google Drive. Your existing Drive contents remain inaccessible to us unless you specifically link them.

Google Docs, Sheets, and Slides (sensitive scopes)

• Scopes: auth/documents, auth/spreadsheets, auth/presentations
• What we access: Read, edit, create, and delete capability for Google Docs, Google Sheets, and Google Slides files in your account.
• What we do with it: Allow your AI Teammates to read documents, spreadsheets, and slide decks you reference by name in a task; edit existing files when you direct your Teammate to update them; and create new documents, spreadsheets, or presentations your Teammate is preparing for you.
• What we do NOT do: We do not enumerate, scan, index, or read documents outside the scope of a specific task you've directed. We do not modify or delete documents without your explicit instruction. We do not retain or share document content beyond what is necessary to complete the task you've requested.

Google Calendar — events scope

• Scope: calendar.events
• What we access: Events on your calendars, including titles, attendees, times, and locations.
• What we do with it: Help your Teammates read your schedule for meeting prep, identify scheduling conflicts, and propose new events for your explicit approval.
• What we do NOT do: We do not create, modify, or delete calendar events without your explicit approval of the specific action.

Gmail — send scope

• Scope: gmail.send
• What we access: The ability to send email from your Gmail address. This scope does not let us read your inbox.
• What we do with it: Send an email your Teammate drafted, only after you approve that specific email on an approval card in MyTeam365.
• What we do NOT do: We do not read, search, or store your Gmail messages through this scope, and we never send an email you have not approved. If you want your Teammates to read email, MyTeam365 supports a separate IMAP connection you set up with an app password from your email provider.

Google Ads (sensitive scope)

• Scope: adwords (Google Ads API)
• What we access: The Google Ads accounts your Google login can manage: campaigns, ad groups, ads, budgets, keywords, audiences, conversion actions, and performance reports.
• What we do with it: Let your Teammates report on how your campaigns are doing, and draft campaigns, ads, budget changes, schedules, bidding changes, conversion tracking, and audiences. Every change that creates, edits, pauses, enables, or spends anything is shown to you on an approval card first and happens only when you click Confirm. New campaigns and ads are created paused.
• What we do NOT do: We never spend money or change an account without your approval of that specific action. We do not use your advertising data for our own advertising, and we do not share it with other users.

YouTube — upload scope

• Scope: youtube.upload
• What we access: The ability to upload videos to your own YouTube channel.
• What we do with it: Upload a video you asked your Teammate to make or run as an ad, to your channel as Unlisted, so it can be used in your Google Ads campaigns. Each upload is approved by you first.
• What we do NOT do: We do not read your channel, your videos, your comments, or your watch history, and we do not publish anything as Public.

Google Merchant Center (sensitive scope)

• Scope: content (Merchant API)
• What we access: The Merchant Center accounts your Google login can see, and the product listings in them.
• What we do with it: Let your Teammates check which products are approved or disapproved and why, link a Merchant Center account to your Google Ads account, and send a product feed you provide, each after your approval, so Shopping and Performance Max campaigns can run.
• What we do NOT do: We do not change prices, delete products, or alter your listings without your approval of the specific action.

You can review the exact OAuth scopes being requested at the time of authorization on Google's consent screen. You may revoke MyTeam365's access to your Google data at any time at myaccount.google.com/permissions.

2.3.2 Facebook and Instagram (Meta) Permissions

When you connect Facebook and Instagram, you sign in with Facebook Login and choose which Pages, Instagram accounts, and ad accounts MyTeam365 may use. Facebook shows you every permission on its consent screen before you authorize. We use only the permissions you grant:

Facebook Pages

• Permissions: pages_show_list, pages_read_engagement, pages_read_user_content, read_insights, pages_manage_posts, pages_manage_engagement
• What we access: The Pages you manage; their published and scheduled posts; comments on those posts; and Page and post insights such as reach, views, follows, and engagement.
• What we do with it: Let your Teammates report on your Page's performance, summarize audience comments, draft posts and comment replies, and — only after you approve each one — publish or schedule a post, reply to, hide, or unhide a comment, or cancel or delete a post.

Instagram

• Permissions: instagram_basic, instagram_manage_insights, instagram_content_publish, instagram_manage_comments
• What we access: Your linked Instagram professional account, its posts and reels, comments on them, and account and media insights.
• What we do with it: Let your Teammates report on performance, draft posts and comment replies, and — only after you approve each one — publish a post or reel, or reply to or hide a comment.

Messenger

• Permission: pages_messaging
• What we access: Messenger conversations between people and your Page.
• What we do with it: Let your Teammates summarize what people are asking and draft replies. A reply is sent only after you approve it, and only within Meta's messaging window after the person messaged your Page. We never start conversations or send unsolicited messages.

Advertising and business assets (optional)

• Permissions: ads_read, ads_management, business_management, catalog_management
• What we access: Your ad accounts, campaigns, ad sets, ads, and their performance; the businesses and Pages you manage; and your product catalogs.
• What we do with it: Let your Teammates explain results and recommend changes. Any change — creating or editing a campaign, ad set, or ad, activating or pausing it, or updating a catalog — is shown to you first and runs only after you confirm. Nothing spends money without your confirmation.

How we treat Meta platform data

• Your approval comes first: Every action that publishes, replies, hides, sends, deletes, or changes ads is shown to you on an approval card describing exactly what will happen, and runs only after you click Confirm.
• We use data received from Meta only to provide the features you use in MyTeam365, in accordance with the Meta Platform Terms.
• We do not sell Meta data, use it for advertising or profiling, or transfer it to data brokers.
• Meta data may be processed by the AI model providers listed in Section 5 solely to generate your Teammates' responses, under the same restrictions described in Section 4.
• We store your Facebook sign-in token encrypted, and only for as long as your connection is active.

You can review and remove MyTeam365's access in Facebook at any time under Settings & privacy → Settings → Business integrations (or Apps and websites). See Section 9.4.1 to delete Facebook and Instagram data held by MyTeam365.

2.3.3 MyTeam365 for Chrome (Browser Extension)

MyTeam365 for Chrome is an optional browser extension that lets your Teammates do tasks you ask for in your own Chrome browser, on websites you are signed into. It works only while a task you (or an automation you set up) started is running, and only on websites you have approved for MyTeam365.

• What it collects during a task: The address and title of the page in the task's tab, the page's visible text, and a list of the page's buttons, links, and form fields. When a step needs it, it also collects a screenshot of that tab. This is sent to MyTeam365 and to the AI model providers MyTeam365 uses (see Section 5.1) to decide the next step, and the task's steps and result are saved to your MyTeam365 account so you can see what was done.
• What it does not collect: It does not read pages outside a running task, does not record your own browsing, never reads or types passwords or verification codes, and refuses to work on banking, payment, and password-manager sites.
• Your control: The first time a Teammate needs a site, the extension asks you to allow that site. Before anything that saves, sends, books, or deletes, it asks for your OK, unless you have marked that site as trusted for saves in MyTeam365 Settings; deletes, payments, and anything that sends a message always ask. Pause stops everything at once.
• Stored on your computer: A connection key, your approved-site list, and the current task's step log. Disconnecting the browser in MyTeam365 Settings, or in the extension, revokes the key.
• Limited use: We do not sell this data, use it for advertising, or use it for anything other than carrying out the tasks you ask for. The use of information received from the extension adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.

2.3.4 MyTeam365 browser (cloud)

For some sites, MyTeam365 runs your teammates’ browser tasks in a browser MyTeam365 runs for you in the cloud, through our provider Browserbase, instead of in your own Chrome. It follows the same rules as MyTeam365 for Chrome above.

Signing in. You sign in to each site yourself, in a window inside MyTeam365 that shows the cloud browser. MyTeam365 does not see or store your passwords.

What is kept. Your cloud browser profile is stored, encrypted, by Browserbase for your account until you delete it. It holds the site sign-ins (cookies and similar site storage) that keep you signed in. It is used only to run tasks you or your automations start.

Recording. Browserbase’s session recording and logging are turned off for these browsers.

When it runs. A browser is started only for a task or a sign-in, and is closed when the task stops.

Deleting. You can delete your cloud browser at any time in Settings → Integrations → Your MyTeam365 browser. This deletes the profile at Browserbase and signs you out of every site in it. Deleting your MyTeam365 account deletes it too.

Billing. Browser time is billed to your account as credits.

Zoom

If you connect your Zoom account, MyTeam365 reads your Zoom data only when you ask a teammate for something, and only with read-only permissions. We do not schedule, change, join or delete anything in your Zoom account.

• What we access: your Zoom user identity (to match a removal notice to your connection), your list of cloud recordings, meeting search results, Zoom's AI Companion meeting summaries and your meeting notes, and cloud-recording transcripts.
• How we use it: to answer your request, for example summarizing a meeting, finding what someone said, or drafting a follow-up. To write the answer, the relevant meeting content is sent over an encrypted connection to the AI model provider that produces the reply (Anthropic, OpenAI or Google).
• What we keep: your Zoom access and refresh tokens, encrypted at rest with AES-256-GCM and never sent to your browser. A meeting's summary, notes and transcript are stored only if you ask a teammate to save that meeting to your library. Teammate replies stay in your private conversation history. A short, truncated preview of each Zoom tool result is kept in an internal log for troubleshooting.
• Sharing: we never sell Zoom data, never show it to other MyTeam365 users, and never use it for advertising.
• Removal: when you disconnect Zoom in MyTeam365 or remove the app in Zoom, we delete your Zoom tokens. Meetings you saved to your library stay until you delete them, or until you ask us to at privacy@myteam365.ai.

Full instructions are on our Zoom page.

2.4 Automatically Collected Information

We automatically collect: device information (browser type, operating system); IP address and approximate location; usage data (features used, session frequency, interaction patterns); cookies and similar tracking technologies; and error logs and performance data.

2.5 AI-Generated Data

Through your use of the Service, our AI systems generate:

• Session learnings: Summaries of what the AI learned about you, your preferences, and topics discussed during sessions
• Deliberation results: Structured outputs from multi-Teammate deliberation sessions
• Meeting summaries: Auto-generated overviews of session content
• Teammate intelligence: Accumulated context that makes your Teammates more effective over time

This AI-generated data is associated with your account and treated with the same protections as data you provide directly.

2.6 Affiliate Program Data

If you participate in our affiliate program, we collect and process: your unique affiliate code and referral links; referral tracking data (which users signed up through your link); commission calculations, earnings, and payout history; Stripe Connected Account information for payouts; and tier status and advancement history.

2.7 Mobile Number and Text Message / Call Consent

If you give us your mobile number and check one or both of our two separate, optional consent boxes (for example, when you register for one of our live workshops, or in the account-setup step after you sign up), we collect your mobile number, which boxes you checked, the date and time you agreed, the wording you agreed to, and the form where you agreed. The informational box covers workshop confirmations and reminders, or getting-started tips and account updates, by text. The "Offers" box covers occasional offers about MyTeam365 by text and by call, including automated, prerecorded, or AI-generated voice calls. We send each kind only to people who checked its box. We keep a record of your consent and of any opt-out. Giving a mobile number and consenting is optional and is not a condition of creating an account, registering for a workshop, or making any purchase.

3. How We Use Your Information

We use your information to:

• Provide the Service: Power your AI Teammate interactions, process your knowledge sources, generate session outputs, and enable Teammate intelligence
• Process with AI models: Your content is sent to third-party AI model providers (see Section 5) for processing. This is core to how the Service works.
• Improve Teammate quality: Session learnings and accumulated knowledge improve your Teammates' responses over time
• Enable integrations: Access connected services to provide context-aware Teammate responses
• Process transactions: Handle subscription billing, credit purchases, affiliate commissions, and affiliate payouts
• Operate the affiliate program: Track referrals, calculate tiered commissions, process payouts, detect fraud, and manage tier advancement
• Communicate with you: Send service announcements, respond to support requests, provide onboarding guidance, and send affiliate program notifications
• Monitor and improve: Analyze usage patterns to improve Service quality, fix bugs, and develop new features
• Ensure safety: Detect and prevent fraud, abuse, and violations of our Terms of Service
• Comply with law: Meet legal obligations, respond to lawful requests, and enforce our terms

We do NOT:

• Sell your personal data to third parties
• Use your content to train our own AI models
• Share your knowledge sources or session content with other users (unless you explicitly publish a Teammate to the Marketplace)
• Access more data from connected services than necessary to provide the features you've enabled
• Open your meetings, messages, sources or files, except as described in Section 6, "Who at MyTeam365 Can See Your Data"

4. Google API Services — Limited Use Disclosure

Specifically, with respect to data received from Google APIs (including Google Calendar, Google Drive, Google Sheets, Google Docs, and Google Slides):

• We use Google user data solely to provide and improve user-facing features that are prominent in the MyTeam365 user interface — specifically, providing your AI Teammates with context from your authorized Google data to generate more relevant responses, summaries, and outputs during sessions you initiate.
• We do not transfer Google user data to third parties except (a) as necessary to provide or improve user-facing features that are prominent in the requesting application's user interface, (b) to comply with applicable law, or (c) as part of a merger, acquisition, or sale of assets, with notice to users.
• We do not use Google user data to serve advertisements, including retargeting, personalized, or interest-based advertising.
• We do not allow humans to read Google user data, except (a) with your affirmative agreement for specific messages, (b) when necessary for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) where the data has been aggregated and anonymized and is used for internal operations.
• Your Google data is processed through the AI model providers listed in Section 5 solely to generate responses to you. These providers are contractually prohibited from using your data to train their models and do not retain it beyond the processing period.

Where Google user data flows through these AI model providers as part of generating your Teammate responses, those providers act as service providers processing data on MyTeam365's behalf, under contractual restrictions equivalent to the Limited Use requirements. They do not store Google user data beyond the immediate processing window required to return a response, and they may not use the data for any other purpose, including model training, advertising, or analytics.

You may revoke MyTeam365's access to your Google data at any time via your Google Account at myaccount.google.com/permissions or through your MyTeam365 account settings.

5. How We Share Your Information

5.1 Third-Party AI Model Providers

To generate Teammate responses, your content (messages, knowledge source excerpts, and integration data relevant to the conversation) is sent to the AI model providers that power your Teammates:

• OpenAI (GPT-4 and related models)
• Anthropic (Claude models)
• Google (Gemini models)

These providers process your data to generate responses and return them to us. Under our agreements with these providers, your data is NOT used to train their general AI models and is NOT stored beyond the processing period required to generate the response.

Links to provider privacy policies: OpenAI, Anthropic, Google.

5.2 Voice Processing

If you use voice features, text may be processed by ElevenLabs for text-to-speech voice generation. Your voice recordings uploaded as knowledge sources are transcribed using automated speech-to-text services and are not shared with ElevenLabs.

5.3 Payment Processing

Subscription billing and affiliate payouts are processed through Stripe. Stripe receives payment information necessary to process transactions. Affiliate payouts are processed through Stripe Connected Accounts. Stripe's privacy policy applies to payment data they handle.

5.4 Service Providers

We share information with service providers who assist us in operating the Service, including hosting providers, email services, and analytics tools. These providers are bound by confidentiality agreements and may only use your data to provide services to us.

5.5 Marketplace

If you publish a Teammate to the Marketplace: other users can INTERACT with your Teammate; other users CANNOT see your uploaded knowledge sources, personality prompts, or configuration details; your Teammate's name, title, description, and avatar are publicly visible; usage statistics and community ratings are publicly visible; and you can unpublish your Teammate at any time.

5.6 Team & Company Sharing

If you use the Service within a team or company: team administrators may have access to shared Teammates and company-wide knowledge sources; individual session content remains private to session participants unless explicitly shared; and company-wide knowledge sources are accessible to all Teammates assigned to that company.

5.7 Affiliate Leaderboard

If you participate in the affiliate program, your affiliate tier and anonymized performance data may be displayed on the affiliate leaderboard. Your email address is masked. You can opt out of leaderboard visibility in your affiliate settings.

5.8 Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.9 Text Messaging (SMS) and Calls

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Sharing with subcontractors that support our messaging and calling, such as the provider that delivers our text messages and places our calls, is permitted only to deliver those messages and calls. All of the categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

6. Who at MyTeam365 Can See Your Data

Your meetings, messages, sources, teammates and settings are yours. People who work for MyTeam365 can open them in only two situations.

6.1 Setup Access, for Businesses We Set Up

When your company buys our setup service, you grant setup access so we can configure your workspace and fix problems without stopping to ask about each one. It covers your meetings, messages, sources, teammates, the list of services you have connected, and your settings. It has an end date, shown on your Onboarding page, normally your Day 30 review, and you can turn it off there at any time. Setup access never covers the content of your connected accounts, such as Gmail, Google Drive, Google Sheets, Dropbox or OneDrive. For that, we ask you first, every time.

6.2 Ask First, for Everyone Else

This applies to every personal account from the day it is created, and to every business once its setup access ends. If we need to open something of yours, for example to fix a problem you reported, we send you a request that names the item, says why, and says how long we are asking for: that day, or the next seven days. The request appears in MyTeam365 and by email. Nothing is opened unless you say yes, and the permission ends on its own.

6.3 What Is Recorded, and What Is Not Covered

Grants, requests and your answers are recorded in your Activity log.

Two things are not covered by either situation. We may act without asking when it is necessary for security, such as investigating abuse, or when the law requires it, as described in Sections 4 and 5.8. And we can always see operational data without opening your content: whether a tool call succeeded, how long a response took, and error logs. That is what lets us notice that something broke before you tell us.

7. Data Storage and Retention

7.1 Storage

Your data is stored on secure servers provided by our hosting infrastructure. Data may be stored and processed in the United States.

7.2 Retention

• Account data: Retained for the life of your account plus 30 days after deletion
• Session content and messages: Retained for the life of your account. You may delete individual sessions at any time.
• Knowledge sources: Retained until you delete them or close your account
• Session learnings: Retained until you delete them or close your account
• Affiliate data: Referral records and commission history are retained for 7 years after account closure for tax reporting purposes. Affiliate profile data is deleted 30 days after account closure.
• Payment records: Retained for 7 years as required by tax and accounting regulations
• Usage logs: Retained for 12 months for analytics and troubleshooting

7.3 Deletion

You may delete your account, individual knowledge sources, sessions, and Teammates at any time through your account settings. When you delete data: it is removed from our active systems within 30 days; it may persist in encrypted backups for up to 90 days before being permanently purged; and data that has been processed by third-party AI providers cannot be recalled from their systems, though they do not retain it beyond the processing period.

8. Data Security

We implement technical and organizational security measures including: encryption of data in transit (TLS/SSL) and at rest; access controls limiting employee access to user data; regular security assessments and monitoring; and secure authentication including password hashing.

No system is completely secure. While we strive to protect your data, we cannot guarantee absolute security. If we become aware of a security breach affecting your data, we will notify you in accordance with applicable law.

9. Your Rights and Choices

9.1 Access and Portability

You may access your data through your account settings. You may export your Teammate configurations, knowledge sources, and session history at any time.

9.2 Correction

You may update or correct your account information and knowledge sources at any time.

9.3 Deletion

You may delete your account and all associated data by contacting privacy@myteam365.ai or through your account settings.

9.4 Integration Disconnection

You may disconnect any integrated service at any time through your account settings. Disconnection stops future data access but does not retroactively remove data already processed.

9.4.1 Deleting Your Facebook and Instagram Data

You can remove MyTeam365's access to your Facebook and Instagram data, and have that data deleted, in any of these ways:

• Disconnect in MyTeam365: Go to Settings → Integrations → Social Media → Facebook & Instagram and click Disconnect. MyTeam365 removes its access at Facebook and deletes your stored Facebook sign-in token immediately.
• Remove the app in Facebook: In Facebook, open Settings & privacy → Settings → Business integrations (or Apps and websites), select MyTeam365, and remove it.
• Request deletion of all Meta data: Email privacy@myteam365.ai with the subject "Delete my Meta data" from your account email, or delete your MyTeam365 account in Settings. We will delete the data we hold that came from Facebook or Instagram — including any of it that appears in your sessions — and confirm by email. Deletion follows Section 7.3: removed from active systems within 30 days and purged from encrypted backups within 90 days.

9.5 Opt-Out of Communications

You may opt out of promotional communications at any time. Service-related communications (security alerts, billing notices) and affiliate transactional notifications (payout confirmations, tier changes) cannot be opted out of while your account is active.

Text messages: You can stop text messages from us at any time by replying STOP to any text we send; this applies to every text, including reminders and offers. Reply HELP for help. Opting out of texts does not cancel your account or your workshop registration.

Calls: You can stop calls from us at any time by telling us so during a call, by replying STOP to any text we send, or by emailing support@myteam365.ai. We honor the request promptly and keep a record of it.

9.6 For EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights including: right to restrict processing; right to data portability; right to object to processing; and right to lodge a complaint with a supervisory authority. To exercise these rights, contact privacy@myteam365.ai.

9.7 For California Residents (CCPA)

California residents have the right to: know what personal information is collected; know whether personal information is sold or disclosed; say no to the sale of personal information (we do not sell personal information); access their personal information; request deletion of personal information; and not be discriminated against for exercising these rights.

10. Sensitive Data Categories

10.1 Voice and Audio Data

Voice recordings you upload are processed for transcription and knowledge extraction. We do not use your voice recordings to create voice models, clone your voice, or for biometric identification purposes. Voice playback features use ElevenLabs' pre-built voice library, not recordings of your voice.

10.2 Health and Wellness Data

If you upload health-related information (fitness data, health records, wellness notes), this data is treated with heightened security and is used solely to provide your requested Teammate interactions. We are not a healthcare provider and this data is not subject to HIPAA unless we enter into a specific Business Associate Agreement with a covered entity.

10.3 Financial Data

Financial information you upload (budgets, tax documents, investment data) is used solely to power your Teammate interactions. We are not a financial institution and do not provide regulated financial services.

10.4 Minors' Data

The Service is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected data from a child under 16, we will delete it promptly. If you believe a child under 16 has provided us with personal information, please contact us at privacy@myteam365.ai.

11. Third-Party Avatar and Identity Services

You may choose to create your Teammate's visual identity using third-party services such as HeyGen, Synthesia, D-ID, or similar platforms, and import the resulting avatar into MyTeam365. When you do so: your biometric and likeness data is processed by the third-party service under THEIR privacy policy, not ours; we store only the resulting avatar asset (image or video), not the underlying biometric data used to create it. This option is available for users who prefer to keep their likeness data off our platform.

If you use our built-in AI avatar generation, the avatar is created from AI generation, not from your actual likeness, and no biometric data is collected.

12. Cookies and Tracking

We use cookies and similar technologies to: maintain your session and authentication; remember your preferences and settings; understand how you use the Service (analytics); and prevent fraud and abuse. You can control cookies through your browser settings. Disabling certain cookies may affect Service functionality.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or business operations. For material changes, we will: update the "Last updated" date; provide notice through the Service (in-app notification); and for significant changes affecting your data rights, request renewed consent.

14. Contact Us