What this covers
Isotropic Solutions, Inc. runs two Google Chat applications inside its own Google Workspace domain. Ayla handles sales. Kaya handles delivery. This policy covers both.
Each one is published as a private listing. Only users with an isotrp.com Workspace account can install or use them. They aren't available to the public, and they aren't installed in any client's Workspace.
What the apps can see
Two things.
The first is your Google account identity: your email address and basic profile. That's how the app knows who it's talking to.
The second is the text of Google Chat messages, and only in narrow circumstances. The app reads a message when it has been added to a Space and someone addresses it directly. Messages in Spaces where the app isn't present are outside its reach, as are messages between other people that don't address it.
The apps have no access to Gmail, Drive, or Calendar. They hold no scope that would let them read your mail or your files.
Why they need it
Kaya keeps an internal delivery board current: project status, story progress, and anything flagged as blocked. When you tell it something has moved, it writes that to the board. When you ask it where a piece of work stands, it reads the board and answers. Ayla does the equivalent job on the sales side.
Reading your identity lets the app attribute a change to the person who made it. Reading the message is how it knows what you're asking for.
Where the data goes
Message content and board records are stored in a database Isotropic operates on Railway. Nobody outside Isotropic has access to it.
Message text is redacted before it's written. The redaction strips API keys, access tokens, private keys, and any email address outside the isotrp.com domain. If you paste a credential into a Space by accident, it doesn't reach storage in readable form.
One outside party sees message content: the model provider whose model interprets what you wrote. That's a processing step, and the provider isn't permitted to use the content for its own purposes.
What we don't do with it
- We don't sell it, and we don't rent or trade it.
- We don't use it for advertising, and we don't build advertising profiles.
- We don't share it with third parties, apart from the model provider described above.
- We don't move it into any client-facing system or show it to anyone outside Isotropic.
How long it's kept
Board records persist while the work they describe is active, and for as long as we keep the project history afterward. Stored message text is kept for 90 days and then deleted.
Asking for deletion
Write to adam@isotrp.com and say what you want removed. We'll delete the stored messages tied to your account, and confirm once it's done. If a board record has to stay because it documents delivered work, we'll tell you which record and why.
Changes
If this policy changes, the date at the top changes with it. Anything that meaningfully alters what the apps collect gets announced in the Workspace domain before it takes effect.
Contact
adam@isotrp.com