Privacy Policy

Effective date: July 25, 2026

Cardinal EA AI ("Cardinal," "we," "us," or "our") operates cardinalea.ai and the Cardinal service. This policy explains what information we collect, how we use it, and the choices you have.

Information We Collect

• Account information: name, email address, company name, and other details you provide when you sign up.
• Google Workspace data: if you connect Gmail and Google Calendar, we access the data described below in "How Cardinal Uses Your Google Data."
• Slack data: messages you send to Cardinal in Slack, and the drafts, approvals, and commands you exchange with it, so it can carry out your instructions.
• Usage data: how you interact with Cardinal, including feature usage and error logs, so we can maintain and improve the service.
• Website data: standard technical data (IP address, browser type, pages visited) collected when you visit cardinalea.ai, typically through cookies or similar technologies used by our website platform.

How We Use Your Information

We use your information to:

• Provide and operate Cardinal, including triaging your inbox, drafting replies, managing your calendar, and building your daily brief.
• Personalize Cardinal's behavior to your account, including learning your writing style from your own sent mail.
• Maintain, secure, and improve the service.
• Communicate with you about your account, including support requests and service updates.
• Comply with legal obligations.

How Cardinal Uses Your Google Data

When you connect Gmail, Cardinal reads your inbox and sent mail to prioritize what needs your attention and to learn how you write. It drafts replies in your voice and sends them only after you approve them in Slack. It also applies labels inside your Gmail to show what's been triaged as Reply, Action, or FYI.

When you connect Google Calendar, Cardinal reads your events to build your daily brief and flag conflicts. It creates or changes calendar events only after you approve a specific change.

Cardinal's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Your Gmail and Calendar data is never used for advertising.
• It is never sold or shared with data brokers.
• It is never used to train Cardinal's underlying AI models, generalized or otherwise. Your data stays isolated to your account.
• It is not read by Cardinal's team, except where needed to investigate a security issue, resolve a support request you've raised, or comply with the law.
• Email and calendar data is retained only as long as your account is active, and deleted within 60 days of cancellation.

You can revoke Cardinal's access at any time from your account dashboard, and can request full deletion of your data by contacting chad@cardinalea.ai.

How We Share Information

We do not sell your data or share it with data brokers. We share information only with:

• Service providers who help us run Cardinal (for example, cloud hosting and our underlying AI model provider), bound by confidentiality and data protection obligations.
• Legal and safety purposes, if required by law, subpoena, or to protect the rights, property, or safety of Cardinal, our users, or others.
• Business transfers, if Cardinal is involved in a merger, acquisition, or sale of assets, subject to this policy continuing to apply to your data.

Data Retention

We retain your account and product data for as long as your account is active. Gmail and Calendar data specifically is deleted within 60 days of account cancellation, as described above. You can request earlier deletion at any time by contacting chad@cardinalea.ai.

Data Security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit and access controls limiting who on our team can view account data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights and Choices

You can:

• Revoke Cardinal's access to Gmail or Calendar at any time from your account dashboard.
• Request a copy of the data we hold about you.
• Request correction or deletion of your data.
• Close your account at any time.

To exercise any of these rights, contact chad@cardinalea.ai.

Cookies and Website Analytics

Our website may use cookies and similar technologies to understand site traffic and improve the experience. You can control cookies through your browser settings.

Children's Privacy

Cardinal is not directed to children under 18, and we do not knowingly collect information from children.

Changes to This Policy

We may update this policy from time to time. We will post the updated version on this page with a new effective date. Material changes will be communicated to active users directly.

Contact Us

Questions about this policy or your data can be directed to chad@cardinalea.ai.