Privacy policy

Last updated 12 October 2026

Marley is an assistant that reads your inbox and calendar and tells you what to do next. It is run by Marley. This policy explains what data Marley uses, why, and what control you have over it.

Data from your Google account

When you connect Google, you choose to give Marley these permissions:

• Gmail: read your email to brief you and answer your questions, draft and send the replies you approve, and move threads to or from the inbox.
• Google Calendar: see your events, and create or change the ones you ask for.
• Google Tasks: see, add, complete and edit your to-dos.
• Google Drive: open only the Google Docs you pick, and the ones Marley creates for you. Marley cannot see the rest of your Drive.

Marley never sends an email without your approval. You can remove its access at any time in Marley's settings or at myaccount.google.com/permissions.

Limited Use

Marley's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google data only to provide and improve the features you see in Marley.
• We do not sell Google data, or use or transfer it for advertising, credit checks or lending.
• We do not use Google data to develop, improve or train generalised AI or machine learning models, and the AI providers below do not train on it.
• People do not read your Google data, unless you ask us to (for support), it is needed for security or to comply with the law, or the data has been aggregated and anonymised.

How AI is used

To brief you and answer your questions, Marley sends the relevant parts of your email, calendar, tasks and documents to an AI model, through the Vercel AI Gateway, along with what you type or say. The models come from OpenAI and Google. Voice is turned into text, and replies into speech, by OpenAI. These providers process the data only to return a response to Marley, under terms that forbid training on it.

What we store

• Your name, email address and profile picture, from Google sign-in.
• Google access and refresh tokens, so Marley can work when you are not at the screen.
• Your business details and settings, from onboarding.
• Your conversations with Marley, briefings, notes, tasks and documents you create in Marley.

Marley does not keep a copy of your mailbox or calendar. It reads them from Google when needed. Some of what it reads can appear in conversations and briefings it saves for you.

Where it is stored

Data is stored with Supabase (database and sign-in) and the app runs on Vercel. Both encrypt data in transit and at rest. They and the AI providers above are the only parties we share your data with, and only to run Marley.

Keeping and deleting data

We keep your data while your account is open. Disconnecting Google in Marley's settings deletes your Google tokens straight away. To delete your account and everything stored with it, email privacy@example.com. We delete it within 30 days.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by emailing privacy@example.com. If you are in the EU or UK, you can also complain to your data protection authority.

Changes

If we change this policy, we update the date above. If a change affects how we use Google data, we ask for your consent again before it applies.

Contact

Marley, privacy@example.com