Who we are
Cachy provides desktop and web software that helps users find, save, sync, and use context from their computer. In this policy, "Cachy", "we", "us", and "our" refer to the Cachy product and service.
Questions about this policy or your data can be sent to hi@cachy.space.
Data we collect
Account data
When you create or use a Cachy account, we collect account information such as your email address, authentication records, account settings, connected devices, and billing status.
Product data
Cachy may process product data you choose to use with the app, such as synced files, clipboard history, web app state, chat messages, agent context, support requests, and app settings. Some product data may stay local to your device. Some product data may sync through Cachy Cloud when you sign in and enable synced features.
Device, usage, and diagnostic data
We collect limited technical information needed to operate and improve Cachy, such as app version, platform, device records, telemetry events, sync status, error logs, and timestamps. Diagnostic data helps us debug crashes, sync issues, AuthFill issues, and account problems.
Billing and support data
If you purchase credits or paid features, payment information is handled by our payment processor. We receive records such as payment status, customer identifier, amount, and purchase timestamps. If you contact support, we process the information you send so we can respond.
Google user data and Gmail AuthFill
Gmail AuthFill is optional. If you connect a Google account, Cachy requests Google OAuth
access for your account identity and the Gmail read-only scope: https://www.googleapis.com/auth/gmail.readonly.
What Cachy accesses
Cachy uses Gmail API push notifications to learn when your inbox changes. Those notifications include Gmail account identifiers and mailbox history identifiers, not full email bodies. After a notification, Cachy may use the Gmail API to read a small set of recent or changed messages that are likely to contain login, verification, password reset, magic sign-in, or security challenge codes or links. This can include message IDs, history IDs, sender, subject, snippet, timestamp, and message text needed to identify the code or link.
How Cachy uses Gmail data
We use Gmail data only to provide and maintain AuthFill: detecting sign-in codes or links, delivering the short-lived code or link to your signed-in Cachy devices, renewing Gmail watches, preventing duplicate processing, troubleshooting AuthFill, and protecting the service from abuse or security issues.
We do not use Gmail data for advertising. We do not sell Gmail data. We do not use Gmail data to build user profiles for unrelated purposes. We do not use Gmail data to train or improve generalized AI or machine learning models.
What Cachy stores
To keep AuthFill working, we store Google connection records such as your Google account ID, Gmail address, granted scopes, OAuth tokens, token expiration times, watch status, watch expiration, latest mailbox history cursors, notification timestamps, and limited Pub/Sub webhook metadata such as message IDs and publish times. Cachy does not store a full archive of your mailbox.
AI fallback
AuthFill first tries local extraction. If you enable AI fallback and local extraction does not find a code or link, Cachy may send the minimum relevant email text needed for extraction to Google Gemini. This is used only to extract the sign-in code or link for AuthFill, and you can turn it off in your Cachy account settings.
Google API Limited Use
Cachy's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we use data
We use the data described above to:
- Provide Cachy accounts, sign-in, sync, search, chat, agent, and AuthFill features.
- Deliver clipboard, file, app, and device context across signed-in devices.
- Operate billing, credits, downloads, support, security, and abuse prevention.
- Debug errors, measure reliability, and improve product quality.
- Comply with legal obligations and enforce our agreements.
Security and retention
We use technical and organizational safeguards designed to protect personal data, including access controls, production access restrictions, transport security, and monitoring. No internet service can guarantee absolute security.
We keep personal data for as long as needed to provide Cachy, meet legal requirements, resolve disputes, prevent abuse, and maintain business records. When you disconnect Gmail, Cachy removes stored Google OAuth tokens and Gmail connection records for that integration. Some limited operational logs or security records may remain for a reasonable period.
Your choices and controls
- You can choose whether to create an account and which Cachy features to use.
- You can disconnect Gmail from your Cachy account page.
- You can revoke Cachy's Google access from your Google Account security settings.
- You can turn AuthFill AI fallback on or off in your Cachy account settings.
- You can contact us to request access, correction, export, or deletion of your data.
Children
Cachy is not directed to children under 13, and we do not knowingly collect personal data from children under 13.
International processing
Cachy may process data in countries other than where you live. When we transfer personal data internationally, we use safeguards appropriate for the type of data and service involved.
Changes to this policy
We may update this policy as Cachy changes. If we make material changes, we will update the date above and provide additional notice when appropriate.
Contact
For privacy questions or requests, contact hi@cachy.space.