Privacy

Present (“we”) is a private gift-memory product at context.presentagent.vip. This page explains what we store, what we do not store, and the controls you have.

What we collect

• Account. Email address and auth identity from our sign-in provider (Clerk).
• People & occasions you add. Names, relationships, notes, dates, budgets, gift history, shortlists, and review decisions (candidate / confirmed / dismissed).
• Optional Google connection. If you connect Google, we store an encrypted OAuth token on our servers and import only the signals described on the Google data page. Imports land as reviewable candidates — not automatic facts.
• Operational logs. Standard request logs, reminder delivery status codes, and audit events inside your account (for example privacy export or delete).

What we do not do

• We do not sell your data.
• We do not scan Gmail in the background or store raw messages. Optional read-only Gmail access runs only when you request clues for a saved person; its profile, time, message-count, content, and retention boundaries are described on the Google data page.
• We do not use your people data to train public models. When Gemini is enabled, optional note extraction and gift-idea requests send the profile context needed for that request to Google Gemini. Selected-person Gmail processing has tighter limits described on the Google data page.
• We do not run a product catalog, checkout, or Shopify integration in this product.

ChatGPT beta connection

If you connect Present to ChatGPT, Clerk asks you to authorize the connection. Present receives only the minimum structured arguments in a Present tool call. We do not receive your ChatGPT password, full chat history, other conversations, hidden model reasoning, or data from other connectors unless you explicitly send a supported, minimum structured fact to a Present proposal tool.

Confirmed recipient context returned by Present becomes available to the active ChatGPT workflow that called the tool. Ordinary conversation is not saved to Present. Durable updates are proposal-only: they do not change a recipient profile until you open the returned Present review page and approve the exact diff while signed in.

We retain privacy-minimized raw tool telemetry for at most 30 days: tool name, result class, latency, endpoint version, proposal/read class, and keyed pseudonymous account, client, session, and request references. Raw prompts, recipient content, tool arguments and results, email addresses, OAuth tokens, and authorization codes are excluded. Per-minute abuse counters contain only a keyed pseudonym and expire after two days. The protected reliability monitor returns only aggregate counts, rates, latency, and fixed reason codes. Alert emails contain only the UTC hour and fixed reason codes.

Where data lives

Production data is stored in a private Postgres database (Neon) scoped by account. Connector tokens are encrypted at rest with a server-side key. Email reminders are sent through Resend from reminders@send.presentagent.vip only when you have opted into Planning assistant and an occasion is inside your reminder window.

Your controls

• Recipient-owned sharing. Your self profile can create an optional link containing only the profile shown on that page. Gifters must accept the first import and every update. Revocation stops future access but cannot erase information someone already accepted. Feedback links expose only the listed preferences and keep corrections pending for gifter review.
• Agent permissions. Recommendations only is the default. Account → Agent permissions lets you opt into or out of planning workflows at any time. This setting is separate from connected-source permissions.
• Download. Account → Download my data exports your archive, including privacy-minimized email delivery events still inside their retention window.
• Delete. Account → delete removes your people, occasions, evidence, gifts, shortlists, audit trail, connector tokens, and account-linked email delivery events.
• Disconnect Google. Account → disconnect revokes the stored grant on our side; you can also revoke access in your Google account settings.
• Disconnect ChatGPT. Remove Present from ChatGPT's plugin or connector settings. If its provider grant remains, revoke it from your Present connection settings or contact support. Subsequent calls with a revoked access token are rejected.
• Review queue. Imported suggestions stay candidates until you confirm or dismiss them. Only confirmed facts leave via the demand-context export.

Retention

We keep your data while your account exists. Deleted accounts are removed from the application database. Backups and provider logs may retain residual copies for a limited operational window.

Raw Gmail messages and excerpts are processed transiently and are not retained. Short gift-related candidates derived from Gmail remain until you dismiss them, delete the related person, or delete your account.

Resend delivery webhooks are retained for at most 30 days using only event type, timestamps, provider identifiers, and a one-way hash of the recipient address. Subjects, recipient addresses, and raw webhook payloads are not stored.

Google Limited Use

Present's use and transfer of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use raw or derived Workspace data to train or improve a generalized AI or machine-learning model.

Contact

Questions: support or support@presentagent.vip.