Google Workspace API — Limited Use Compliance Statement

Last updated: September 2026

This page describes how OmniBrief ("we", "us", or "our"), operated by Omni AI Lab, handles user data obtained through Google Workspace APIs, and affirms our compliance with the Google Workspace API User Data and Developer Policy, including the Limited Use requirements. It supplements our Privacy Policy.

Limited Use Compliance Statement

OmniBrief's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Google user data obtained through Workspace APIs is not used, transferred, or sold for the purpose of creating, training, or improving generalized or foundational machine learning or artificial intelligence models.

Which Google APIs We Use

OmniBrief requests the minimum scopes required to deliver the features a user explicitly turns on. We do not request scopes for functionality the app does not provide.

Scope	Why we request it
`https://www.googleapis.com/auth/calendar.events.readonly`	Read-only access to the user's upcoming calendar events, so OmniBrief can list meetings in the app and — only when the user enables it — send a notetaker bot to join a meeting and record it for the user.
`https://www.googleapis.com/auth/userinfo.email`	Identify which Google account is connected, so the correct calendar connection is shown in settings and meeting summaries are emailed to the right address when the user opts in.
`openid`, `email`, `profile`	Google Sign-In — to create and authenticate the user's OmniBrief account.

Calendar access is read-only. OmniBrief never creates, edits, or deletes events in a user's Google Calendar.

How We Use Google User Data

Google user data is used solely to provide the user-facing features that the user requested:

Displaying the user's upcoming meetings inside the app.
Scheduling or joining a meeting notetaker bot for meetings the user chooses to record.
Recording, transcribing, and summarizing meetings the user has explicitly opted to record.
Emailing the resulting recording and summary to the user, and — only if the user enables the "share with everyone" setting — to that meeting's attendees.
Authenticating the user's account via Google Sign-In.

We do not use Google user data for any purpose beyond providing these features. We do not sell Google user data, and we do not use it for advertising, ad targeting, or to build user profiles for marketing.

Third-Party AI Services

OmniBrief uses third-party AI services to transcribe and summarize the content a user asks us to process, including speech-to-text and large language model providers such as OpenAI and Google Gemini.

Such processing is limited to providing the user-requested functionality of our application — for example, producing a transcript or summary of a meeting the user chose to record.
These providers are not permitted to use Google user data, or any data derived from it, to train or improve their generalized or foundational AI models. We use API endpoints and contractual terms that exclude customer content from model training.
We do not train, fine-tune, or otherwise develop our own machine learning or AI models using Google user data or data derived from it.

Human Access

Humans do not read, process, or otherwise access Google user data, except: (a) with the user's explicit consent for a specific purpose, such as troubleshooting a support request they raised; (b) where necessary for security purposes, such as investigating abuse; or (c) where required to comply with applicable law.

Transfer of Data

We do not transfer or sell Google user data to third parties, except: (a) to the service providers strictly necessary to operate the features described above (cloud hosting, meeting recording, transcription, and summarization), each bound by contractual terms consistent with these Limited Use requirements; (b) to comply with applicable law; or (c) as part of a merger, acquisition, or sale of assets, following prior notice to users.

Retention and Revoking Access

Users can disconnect a Google account at any time from Settings → Calendar in the app, which deletes the stored OAuth credentials and the associated calendar connection. Users can also revoke OmniBrief's access directly at myaccount.google.com/permissions. Deleting an OmniBrief account removes the associated data as described in our Privacy Policy.

Contact

Questions about this statement or our handling of Google user data:
Email: privacy@omniailab.com
Postal: Omni AI Lab, Privacy Team