Privacy Policy | MLOK AI

1. Introduction

MLOK, Inc. ("we," "us," or "our") is an AI-powered service that reads school-related emails and automatically syncs event details to your calendar. We are committed to protecting your personal information and being transparent about how we collect, use, and safeguard your data. This Privacy Policy applies to our website and all future product features (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account, we collect your name, email address, and any profile information you choose to provide.

2.2 Email and Calendar Data

To provide the core Service, we receive email in two ways: messages you explicitly forward to us, and, if you connect your Gmail account, new messages that arrive in your inbox. In both cases, we use the message content, including attachments, solely for the purposes of our services. Message content is held temporarily in encrypted storage and processed by an AI model operated by our infrastructure provider, which does not retain the data or use it to train AI models. It is deleted in all cases within 24 hours. No person at MLOK AI reads your email, except with your explicit permission (for example, to resolve a support request), when necessary for security purposes, or when required by law. Gmail data is subject to the additional commitments described in Section 2.3 (Gmail API User Data).

We access calendar data only to create, update, or delete events on your behalf, and we do not read personal calendar events unrelated to our Service.

2.3 Gmail API User Data

If you connect your Gmail account or Workspace, MLOK AI requests read-only access (the gmail.readonly scope) to process new messages that arrive in your inbox, including their content, headers, and attachments. We use this data solely to extract event details and add them to your MLOK AI calendar. We never modify, send, or delete your email. Our use and transfer to any other app of information received via the Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2.4 Usage and Technical Data

Log data: IP address, browser type, pages visited, and timestamps.
Device information: Device type, operating system, and unique device identifiers.
Cookies and similar tracking technologies (see Section 7).

3. How We Use Your Information

To provide the core Service. We never use your data for AI model training.
To communicate with you about your account, and product updates.
To detect and prevent fraud, abuse, and security incidents.
To comply with legal obligations.
To send transactional emails (e.g., confirmations). We will ask for your explicit consent before sending marketing emails.

We do not sell your personal data. We do not use your email or calendar content to serve you advertisements.

4. AI Processing and Data Minimization

Our AI models process your email content to identify calendar events (e.g., dates, times, locations, event names). Processing is performed on a need-to-know basis: we extract only the minimum data necessary to fulfill the requested action.

5. Data Sharing and Third Parties

We share your data only in the following circumstances:

Service providers: Trusted vendors who help us operate the Service (e.g., cloud infrastructure, AI processing, authentication). All vendors are contractually bound to process data only as instructed.
Calendar and email providers: Google, Microsoft, or other providers you connect — only to the extent needed to sync your events.
Legal compliance: If required by law, court order, or governmental authority.
Business transfer: In the event of a merger, acquisition, or sale, your data may transfer to the successor entity, subject to the same protections.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your data at any time by contacting us at [email protected]. We will delete or anonymize your data within 30 days of a verified request, except where retention is required by law.

7. Cookies

We use essential cookies required for the Service to function (e.g., authentication tokens). We may use analytics cookies to understand usage patterns. You may disable non-essential cookies in your browser settings; this will not affect core functionality.

8. Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure. We encourage you to use strong, unique passwords and to revoke third-party access when it is no longer needed.

9. Connected Accounts and Parental Authority

If you choose to connect a calendar or email account, you authorize us to access the data described in Sections 2.2 and 2.3 solely to provide the features you enable. For email, this means extracting event information from your messages and adding it to your MLOK AI calendar. Message content is retained only as described in Section 2.2.

You represent that you are the parent or legal guardian (or otherwise have parental responsibility and authority) for any child whose information may appear in connected accounts, and that you have the right to provide this information.

You can disconnect an integration at any time. When you disconnect, we stop accessing the account, revoke our access, and delete your stored credentials and any email content not yet processed. You can also revoke access to your Google account at myaccount.google.com/permissions.

All data processed through the Service, including any information relating to children that may appear in connected accounts, is encrypted in transit (TLS) and at rest. To exercise your privacy rights, see Section 10.

10. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request erasure of your personal data ("right to be forgotten").
Portability: Receive your data in a structured, machine-readable format.
Objection / Restriction: Object to or restrict certain processing activities.
Withdraw Consent: Revoke any consent you have given at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our website. Your continued use of the Service after any change constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:
MLOK AI
Email: [email protected]