Privacy Policy

We collect information you provide directly, such as your name, email address, organization, and messages you send us.

We also collect basic usage information, including pages visited, device and browser information, approximate location, and product interactions.

When you connect a third-party service, such as Google, Slack, or a CRM, we receive the information that service makes available within the permissions you grant.

When you connect a Google account, Oasis accesses only the data covered by the permissions you approve on Google's consent screen. Depending on what you connect, this can include Gmail messages and their metadata, Google Calendar events, and Google Drive files, including Docs and Sheets.

We use this data to carry out the requests you make and the workflows you configure, such as searching and summarizing your email, preparing for meetings, drafting replies, creating or updating documents and events, and keeping your workspace's memory of connected sources up to date.

We use account information, information you provide directly, and basic usage information to operate Oasis, provide support, improve Oasis, protect our systems, and communicate with you. Google user data is subject to the narrower purposes and restrictions below.

We do not sell personal information.

Where the GDPR or similar laws apply, we process personal information to perform our contract with you, for our legitimate interests in securing, understanding, and improving Oasis, with your consent where we ask for it, and to meet legal obligations. You can withdraw consent at any time.

Oasis uses Google user data only to provide or improve the user-facing features you enable. This includes processing information from connected Google services to carry out your requests and authorized workflows. We do not use Google user data for unrelated product development, marketing, advertising, credit scoring, or lending.

We do not sell Google user data or use it to train or improve generalized artificial intelligence or machine-learning models, and we do not mine or analyze it beyond what is needed to provide the features you use. When Google user data is processed by an AI or integration service provider, that processing is limited to delivering the Oasis features you authorize.

Oasis's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. These restrictions also apply to information derived from Google user data and take precedence over broader statements elsewhere in this policy.

Oasis uses third-party AI model providers to run its features. Our agreements with these providers prohibit them from using the data we send them to train or improve their models.

For information other than Google user data, we share information with service providers who help us host, secure, analyze, and operate Oasis. We may also disclose that information when required by law or to protect Oasis, our users, or the public. Sharing of Google user data is limited as described below.

Our current list of service providers is available at trust.joinoasis.com.

We share Google user data with service providers only as necessary to deliver or improve the user-facing features you authorize, with your consent. We may also disclose it when necessary for security purposes or to comply with applicable law. Transfers associated with a merger, acquisition, or sale of assets require your explicit prior consent.

Our personnel and service providers may read Google user data only with your affirmative agreement to access specific information, when necessary for security purposes, or when required by law.

When your workspace adds Oasis to Slack, we receive the data covered by the scopes you approve: messages and files in channels, group messages and direct messages the Oasis app or one of your agents is a member of, @mentions of the app, basic profile information for workspace members (such as name, display name and profile photo), and channel names.

When you connect your own Slack account to your agents, they can also search and read the channels, direct messages and files that your Slack account can access, within the permissions you approve. Agents access this data only when they carry out a request you or your organization make.

We use this data only to let your agents read the conversations they are part of or that you give them access to, carry out your requests, reply in Slack under their own names, and show the right people and channels in Oasis. We do not sell Slack data or use it for advertising.

Slack also sends technical data with each event, such as workspace, channel, user and message IDs and timestamps. We use it only to route events and keep the connection working, and do not use it for any other purpose.

Slack data follows the retention and deletion terms below. Removing the Oasis app from your Slack workspace, or disconnecting Slack in Oasis settings, stops us from receiving new Slack data.

When you delete content, disconnect a service, or close your account, we delete the associated data, including Google user data, within 90 days, unless your organization has agreed a different retention period with us in writing or the law requires us to keep it longer.

You can ask us to delete your data at any time by emailing privacy@joinoasis.com. Organizations can contact us to discuss zero data retention.

You can disconnect any connected service from your Oasis settings. You can also revoke Oasis's access to your Google account at any time from your Google Account's third-party connections page at myaccount.google.com/connections.

We protect sensitive information, including Google user data, through authentication and access controls that restrict access to authorized users and services. We verify organization membership before allowing access to organization-scoped resources.

Data is encrypted in transit and at rest. More detail on our security program is available at trust.joinoasis.com.

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the use of your personal information, to object to its processing, and to withdraw consent you have given. You may also have the right to complain to your local data protection authority.

Email privacy@joinoasis.com to make a request.

When an organization uses Oasis to process personal data about its members, contacts, or others, we process that data on the organization's behalf under our Data Processing Addendum, available at joinoasis.com/dpa. Transfers of personal data out of the European Economic Area, the United Kingdom, or Switzerland are covered by the safeguards described there.

We use cookies and similar technologies as described in our Cookie Policy at joinoasis.com/cookies.

Oasis is not intended for children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy from time to time. We will post the new version here and update the date above. If we make material changes, we will also notify you by email or in Oasis before they take effect.

Email privacy@joinoasis.com with any questions about this policy or our data practices.