Privacy Policy

Effective date: November 4, 2026
Last updated: November 4, 2026

This Privacy Policy explains how GC, Inc. ("GC", "we", "us", "our") collects, uses, shares and protects personal information when you use the GC application at gcapp.ai and related services (the "Service"), and when you visit our website.

1. Who we are

GC, Inc. is a company located in Massachusetts, United States. GC is a collaborative, AI-assisted business platform for teams: tasks, messages, documents, lists, mindmaps and AI agents that work across them.

The Service is currently offered to users in the United States.

2. Information we collect

Account information

When you sign in with Google, we receive your name, email address and profile picture from Google. If you sign up with email, we collect your email address and password (stored as a secure hash). We also store your organization, membership and role information.

Content you provide

We store the content you and your organization create or upload in the Service, including tasks, comments, lists and records, documents and files, mindmaps, chat conversations with AI agents, and agent configurations.

Connected mailboxes

If you connect a mailbox using IMAP/SMTP, we store the connection settings and credentials you provide, and we import and store email messages and attachments from that mailbox so they can be searched, organized and used by AI agents in the Service. We send email through that mailbox only when you or an agent you configured instructs the Service to do so.

Audio

If you use voice input, we process your audio recording to convert it to text.

Usage and technical information

We collect information about how the Service is used and how it performs, such as log data, IP address, browser type, request metadata, error reports, and records of AI usage (for example, which features and models were used and how many resources they consumed).

Payment information

Payments are processed by Stripe. We do not receive or store your card number or other payment card details. We store a Stripe customer identifier and your organization name for billing purposes.

3. How we use information

• To provide, operate and maintain the Service, including search, AI agents and collaboration features.
• To authenticate you and secure your account.
• To process subscriptions and credit purchases.
• To send service emails, such as invitations, notifications and account messages.
• To monitor performance, diagnose errors and improve reliability.
• To respond to support requests.
• To comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use it for advertising.

4. AI processing

AI features in the Service send relevant content (for example, your messages to an agent, and related tasks, documents or emails) to our AI service providers to generate responses, summaries, search indexes and other results. Documents and images may be processed to extract text.

Your content is not used to train AI models, either by us or by our AI service providers. Our AI providers process data under API terms that prohibit using our customers' data for model training.

5. Google user data

When you use Google Sign-In, we request only basic profile information: your name, email address and profile picture. We use this information solely to create and authenticate your account and to display your identity to members of your organization. We do not access your Gmail, Google Drive, Google Calendar or other Google services through Google Sign-In.

We do not sell Google user data, use it for advertising, or transfer it to third parties except as needed to provide the Service, to comply with law, or as part of a merger or acquisition.

6. How we share information

• Within your organization. Content you create may be visible to other members of your organization according to the sharing and access settings in the Service.
• Service providers. We share information with providers that help us operate the Service, listed in Section 7. They may use it only to provide services to us.
• Mail providers you connect. When you connect a mailbox, the Service communicates with your mail provider using the credentials you supplied.
• Legal reasons. We may disclose information if required by law, or to protect the rights, safety or property of GC, our users or others.
• Business transfers. If GC is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this policy.

7. Service providers

We may update this list as our providers change.

8. Where data is stored

Our application servers and databases are located in the United States. Uploaded files, email attachments, database backups and search index data are stored in Finland (European Union). Our service providers may process data in other countries in accordance with their own terms.

9. Retention and deletion

We keep your information for as long as your account is active or as needed to provide the Service.

You can request deletion of your account and personal information by emailing privacy@gcapp.ai. We will delete your information from our active systems within 30 days of a verified request. Copies in backups are removed within 90 days as backups are rotated. We may keep limited information where required by law, for example billing records.

Content created within an organization may be retained by that organization after you leave it, as described in Section 13.

10. Security

We use industry-standard measures to protect your information. Data is encrypted in transit using TLS. Mailbox credentials are encrypted at rest. Access to production systems is restricted to authorized personnel. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Cookies and local storage

We use only strictly necessary cookies and browser storage: to keep you signed in and to remember interface settings, such as panel layout. We do not use advertising or analytics cookies.

12. Your choices and rights

• You can access and update much of your information directly in the Service.
• You can disconnect a connected mailbox at any time, after which we stop accessing it.
• You can request a copy of your personal information, its correction or its deletion by emailing privacy@gcapp.ai.

Depending on your state of residence, you may have additional rights under applicable law. We will not discriminate against you for exercising them. We will verify your identity before acting on a request.

13. Organization accounts

When you use the Service as a member of an organization, the organization controls the content created within it. If you leave an organization or your membership is removed, content you created in shared spaces may remain available to the organization. Requests about organization content may be referred to the organization's administrator.

14. Children

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "Last updated" date. If changes are material, we will notify account holders by email or in the Service.

16. Contact us