Google data and privacy
What Harriet receives when you connect Google Docs, Sheets, Slides or Drive, what it does with that data, and how to unlink and remove access.
What Harriet receives
When you connect a Google connector under My connected apps, Google shows a consent screen that lists the permissions Harriet requests. Harriet receives only what you approve there: your Google name and email address, plus the files and content in Docs, Sheets, Slides and Drive that you, or a skill you ask to act for you, open, read or edit. Every call runs as you, with your own Google permissions. See Connecting your accounts for how per-person connections work.
How Harriet uses it
Harriet uses Google data only to do what you ask, such as reading a launch plan in Docs or updating a budget in Sheets. It does not use Google data for advertising, does not sell it, and does not use it to create, train or improve any AI or machine learning model, Harriet's or anyone else's. Harriet staff do not read it except with your consent, to investigate a security issue or abuse, or to comply with the law.
The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
Where the content goes
To write a response, Harriet sends the content you asked about to an AI model provider. The sub-processors page lists the providers, the models each one serves and what each does with data. Harriet has no arrangement with any provider that permits training on, or sharing of, that content.
Your organization can change where requests go:
- Bring your own keys. Requests use your own provider account and its terms. See Bring your own keys.
- Self-hosted models. Requests go from your devices to your own server, and Harriet does not process them. See Self-hosted models.
- Other AI clients. If you use Harriet's connectors from another AI client, such as Claude Desktop with a Claude account or Cursor, that client and its vendor handle the content under your own agreement with them.
How long Harriet keeps it
Harriet stores your Google credentials encrypted and keeps them until you unlink the app or your account is deleted. Content read from Google is used to answer your request. It can appear in the conversation that your request produces, which follows your organization's retention settings, and large results are saved for a few hours so the model can query them.
Unlink and remove access
- Open My connected apps. In your account menu, select My connected apps and find the Google connector.
- Select Unlink. If the card shows Reconnect, open More actions first. Harriet deletes the credentials it holds for that connection, and the connector's tools stop working for you until you connect again.
- Remove the grant at Google. Open your Google Account's third-party access page, select Harriet and remove access. Do this too if you stop using Harriet.
To ask Harriet to delete other data about you, email privacy@harriethq.com. The full commitments are in the Google user data section of the privacy policy.