Privacy Policy
Last updated: 18 October 2026
Agent OS is an internal tool of 7:31 LAB. It runs AI agents for the studio's own team; it is not offered to the public and only people on its operator list can sign in. This policy explains what the app does with the data it can access, in particular data from Google accounts that an operator chooses to connect.
Data we access
- Your email address, to sign you in (magic link) and to identify a connected Google account.
- With your consent, read-only access to the Google accounts you connect: Google Calendar events, Gmail message metadata and snippets (sender, subject, date, labels, a short preview; not full bodies or attachments), and Google Tasks.
The app never sends email, never changes your calendar or tasks, and never deletes anything in Google.
How we use it
Only to produce what you ask for: the morning brief, the weekly review and similar summaries shown to you in Agent OS. To write them, the relevant calendar, email and task data is sent to Anthropic's Claude API, which processes it to generate the summary. Anthropic does not use data sent through its commercial API to train its models.
Limited Use of Google user data
Agent OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the features described above, is not sold, is not used for advertising, is not used to train AI models, and is not read by humans except with your permission, for security reasons, or where required by law.
Storage and security
- Generated briefs, your feedback on them and an activity log are stored in a Supabase database in the EU (Ireland), protected by row-level security. The app runs on Vercel.
- Google access is kept as a refresh token, encrypted before it is stored. Raw mailbox and calendar data is read when a brief is generated and is not stored, except for what the brief itself quotes.
- All traffic is encrypted in transit (HTTPS).
Sharing
Data is shared only with the service providers that run the app (Anthropic, Supabase, Vercel), and only as needed to run it. It is not sold or shared with anyone else.
Retention and your choices
- You can disconnect a Google account at any time from Settings; its stored token is deleted. You can also revoke access from your Google Account permissions.
- You can delete any generated brief from the Runs page.
- To have all your data deleted, write to the contact below.
Contact
7:31 LAB · hello@731lab.com