Privacy Policy

The Tutti websites, applications, and services (the "Service") are operated by Mikayel Grigoryan, doing business as Tutti ("Tutti", "we", "us", "our"). This Privacy Policy explains how we process personal information when you visit our websites, create an account, or use the Service.

When a customer uses the Service to process personal information on its own behalf, for example the contents of a connected mailbox or its contact lists, that customer controls the information and we process it on the customer's instructions under our Terms of Service and Data Processing Addendum. Questions about that information should be directed to the customer.

Depending on how you use the Service, we may collect the following categories of information:

• Account and profile information, such as your name, email address, profile image, and identifiers from the sign-in provider you use.
• Workspace information, such as workspace names, members, roles, permissions, and invitations.
• Content and data from services you connect, such as email messages, drafts, labels, and their metadata (senders, recipients, subjects, headers, and timestamps), and files or documents you choose to connect.
• Content you create or upload, such as contacts, templates, drafts, notes, and settings.
• Billing information, such as plan, subscription status, and transaction records. Payment card details are handled by our payment providers and are not stored by us.
• Communications with us, such as support requests and feedback.
• Technical and usage information, such as IP address, browser and device information, log data, and information about how the Service is accessed and used.
• Information derived from the above, such as hashed identifiers used to prevent abuse of free trials.

We use cookies and similar technologies that are necessary to operate the Service, such as keeping you signed in, and browser storage for preferences. If we introduce non-essential cookies, we will update this policy and obtain consent where required.

• To provide, operate, maintain, and support the Service, including features that use artificial intelligence.
• To authenticate users and secure the Service, and to detect, prevent, and investigate fraud, abuse, security incidents, and violations of our terms.
• To process payments and manage subscriptions, trials, and usage limits.
• To communicate with you about the Service, including service, security, billing, and administrative messages.
• To understand usage, fix problems, and improve the Service, using aggregated or de-identified information where possible.
• To comply with legal obligations, enforce our agreements, and establish, exercise, or defend legal claims.
• For any other purpose with your consent or as disclosed to you at the time of collection.

We do not sell personal information and do not use it for targeted advertising.

Where the GDPR or similar laws apply, we rely on these legal bases: performance of a contract with you; our legitimate interests in operating, securing, and improving the Service and preventing abuse, balanced against your rights; compliance with legal obligations; and your consent, which you may withdraw at any time without affecting prior processing.

If you connect a Google account, the Service accesses only the Google data needed for the features you use, within the permissions you grant: basic profile information to sign you in; email messages, drafts, labels, and metadata to display, organize, classify, and draft replies to mail and to send messages you choose to send; and files you select, such as spreadsheets, to use in drafting.

Tutti's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google user data only to provide and improve user-facing features of the Service.
• We transfer it only as necessary to provide those features, for security purposes, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
• We do not use or transfer it for advertising, and we do not sell it.
• We do not allow humans to read it unless we have your affirmative consent for specific data, it is necessary for security purposes or to comply with applicable law, or it is aggregated and anonymized for internal operations.
• We do not use it to develop, improve, or train generalized artificial intelligence or machine learning models.

You can revoke access at any time by disconnecting the account in the Service or through your Google Account permissions settings.

Some features send relevant content, such as message text, templates, and contact details, to third-party artificial intelligence providers to generate or classify content. We configure these requests so that providers may not retain the content beyond processing the request or use it to train their models. We do not use customer content to train AI models.

• With other members of your workspace, according to their roles and permissions.
• With service providers that process information on our behalf, such as hosting, database, infrastructure, email, artificial intelligence, analytics, and customer support providers, under obligations to protect it.
• With payment processors and resellers that handle purchases, taxes, and invoicing, which may act as independent controllers under their own privacy policies.
• With third-party services you choose to connect, as directed by you.
• With authorities, courts, or other parties when we believe in good faith it is required by law or legal process, or necessary to protect the rights, property, or safety of Tutti, our users, or others.
• With a successor or acquirer, or a company formed to operate the Service, in connection with a reorganization, merger, acquisition, financing, or sale of assets.
• With your consent or at your direction.

We keep personal information for as long as needed for the purposes described in this policy, including to provide the Service, comply with legal, tax, and accounting obligations, resolve disputes, prevent abuse, and enforce our agreements. When information is no longer needed, we delete or de-identify it. Some information, such as hashed identifiers used to prevent trial abuse and records we are legally required to keep, may be retained after your account is deleted. Copies may remain in backups for a limited period.

We use reasonable technical and organizational measures designed to protect personal information, including encryption, access controls, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials secure.

We and our service providers may process personal information in countries other than the one where you live, including the United States, whose data protection laws may differ. Where required, we rely on appropriate safeguards for such transfers, such as the European Commission's Standard Contractual Clauses.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to restrict or object to certain processing, to withdraw consent, and to lodge a complaint with a supervisory authority. To exercise these rights, contact mikayel@tutti.work. We may need to verify your identity before responding, and we may decline requests where permitted by law.

If your information is processed by one of our customers through the Service, please contact that customer; we will assist them as required by law and our agreements.

We do not sell or share personal information for cross-context behavioral advertising, and we do not discriminate against you for exercising your rights.

The Service is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this policy from time to time. We will post the updated version with a new effective date and, if changes are material, make reasonable efforts to notify you, for example by email or in the Service.

Questions or requests about privacy: mikayel@tutti.work.