Pactly

Privacy Policy

Effective Date: October 8, 2026
Last Updated: October 8, 2026 (Gmail write permissions added)

VR AI Solutions LLC (“VR AI Solutions,” “we,” “us,” or “our”) operates Pactly (“Pactly”), available at https://trypactly.com.

This Privacy Policy explains how Pactly collects, uses, stores, protects, and deletes information when you use our application and services.

By using Pactly, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

1.1 Account Information

When you create or use a Pactly account, we may collect information necessary to operate your account, such as:

• Your name or Google account information associated with authentication;
• Your email address;
• Authentication and session information; and
• Information necessary to maintain your Pactly account.

1.2 Gmail Data

Pactly may request permission to access your Gmail account using Google’s Gmail API.

Pactly requests the gmail.modify and gmail.send permissions. These permissions allow Pactly to:

• Read Gmail threads and messages (to identify actionable items);
• Apply and remove Gmail labels — Pactly automatically applies Pactly/Action and Pactly/Waiting labels to threads with open items during synchronization, and moves threads to Pactly/Done when you complete them. You can turn automatic labeling off in Pactly’s Settings;
• Archive Gmail threads (remove them from your inbox) — only when you explicitly tap Archive on an item;
• Create Gmail drafts — only when you explicitly choose “Save to Gmail” on a draft; and
• Send a Gmail draft — only when you explicitly confirm sending in a dedicated confirmation dialog, or at a future time you explicitly schedule ("Send later"). A scheduled send is still your send: you chose the content and the time, and Pactly stores it until it is sent or you cancel it. If a send attempt ends with an unclear outcome (for example the connection drops before Gmail confirms), Pactly holds it for your review instead of automatically retrying — it is never sent twice on its own. Pactly never sends email on its own initiative, and sending is never triggered by synchronization.

When you authorize Gmail access, Pactly may process recent Gmail threads in order to provide its core functionality.

During a synchronization, Pactly may access up to 50 recent email threads from approximately the previous 60 days.

Depending on the contents of those messages, the information accessed may include:

• Sender information;
• Subject lines;
• Dates and timestamps;
• Email body text; and
• Thread information.

1.3 Google Calendar Data

Pactly may request permission to access your Google Calendar using Google’s Calendar API.

Pactly requests the calendar.readonly permission. This permission allows Pactly to read calendar information but does not allow Pactly to create, modify, or delete calendar events.

Pactly accesses Calendar information to help identify and understand deadlines, meetings, appointments, and other time-sensitive obligations that may be relevant to the tasks and commitments identified by Pactly.

Depending on your calendar configuration and the events available to the application, the information processed may include:

• Calendar event titles;
• Event descriptions;
• Event start and end dates and times;
• Event location information;
• Event attendees;
• Event status;
• Calendar identifiers; and
• Other event information made available through the authorized read-only Calendar access.

Pactly uses this information to provide productivity features, including helping identify upcoming meetings and deadlines and providing context for commitments or tasks identified from your connected services.

Pactly does not modify, create, or delete your Google Calendar events.

Pactly does not use Google Calendar data for advertising.

Pactly does not sell Google Calendar data.

Pactly does not use Google Calendar data to build advertising profiles.

Pactly does not use Google Calendar data to train artificial-intelligence or machine-learning models.

1.4 Information Extracted From Email and Calendar Data

Pactly processes authorized Gmail and Google Calendar information to identify potentially actionable items, including:

• Emails that appear to require a reply from you;
• Promises or commitments you appear to have made;
• Deadlines mentioned in communications;
• Upcoming meetings or appointments;
• Time-sensitive tasks;
• Conversations waiting for a response from another person; and
• Relationships between commitments, deadlines, meetings, and other calendar events.

Bulk and marketing email is filtered out before qualifying items are added to your Pactly queue.

The application uses locally executed heuristic and pattern-matching code to perform this extraction.

2. How We Use Gmail and Google Calendar Data

Pactly uses authorized Gmail and Google Calendar data solely to provide and improve the functionality of the Pactly service.

Specifically, Gmail and Calendar data may be used to:

1. Identify potentially important commitments, replies, deadlines, meetings, and pending conversations;
2. Generate your Pactly action queue;
3. Provide briefings and summaries within Pactly;
4. Provide context about upcoming meetings and deadlines;
5. Maintain the status of extracted items, such as whether an item has been completed;
6. Apply Pactly labels to Gmail threads during synchronization (unless you disable this in Settings);
7. Archive Gmail threads, create drafts, and send drafts — in each case only when you explicitly request the action for an individual item; and
8. Operate, secure, troubleshoot, and maintain the service.

Pactly does not use Gmail or Google Calendar data for advertising.

Pactly does not sell Gmail or Google Calendar data.

Pactly does not transfer Gmail or Google Calendar data to data brokers.

Pactly does not use Gmail or Google Calendar data to build advertising profiles.

Pactly does not use Gmail or Google Calendar data to train artificial-intelligence or machine-learning models.

3. No Third-Party AI Processing of Email or Calendar Content

Pactly’s current extraction system does not use OpenAI, Anthropic, Google Gemini, or another external artificial-intelligence provider to analyze your Gmail or Google Calendar content.

Email and Calendar extraction is performed using heuristic and pattern-matching code running within Pactly’s application infrastructure.

Pactly does not send Gmail or Google Calendar content to an external AI provider for processing.

If this changes in the future, we will update this Privacy Policy and obtain any permissions or consents required by applicable law and third-party platform requirements.

4. What We Store

Pactly does not permanently store the full body of your Gmail messages.

During synchronization, email body text may be processed temporarily in application memory. After processing, the full email body is discarded and is not retained as a persistent database record.

Pactly may permanently store extracted information necessary to provide the service, including:

• Item title;
• Contact information;
• Item category;
• A one-line explanation or rationale;
• A short evidence quote derived from the relevant email;
• Confidence score;
• Item status; and
• Other information necessary to operate the Pactly queue and related features.

Calendar information may similarly be processed to identify relevant meetings, deadlines, and time-sensitive obligations. Pactly should only persist Calendar-derived information necessary to provide the applicable Pactly feature.

Because evidence quotes may contain portions of an email, users should understand that limited excerpts from email messages may be retained even though full email bodies are not.

If you enable push notifications, Pactly stores your browser's push subscription (endpoint URL and encryption keys) so it can deliver meeting reminders, follow-up nudges, and escalation alerts. You can disable notifications at any time in Settings, which deletes the subscription.

5. OAuth Credentials and Tokens

When you connect Gmail or Google Calendar to Pactly, OAuth credentials or access tokens may be stored to allow Pactly to perform authorized synchronization.

OAuth tokens are encrypted using AES-256 encryption in our application infrastructure.

Pactly does not store your Google password.

Your Google authorization is controlled through Google’s authorization system, and you may revoke Pactly’s access through your Google account settings.

6. Data Retention

Pactly currently retains account and extracted data until you delete your Pactly account, unless a different retention period is required by law.

Pactly does not currently apply an automatic expiration period to stored account or extracted-item data.

You may delete your account using Pactly’s “Delete my account” functionality.

When an account is deleted, Pactly is designed to delete the associated:

• User account;
• OAuth tokens;
• Extracted items;
• Calendar-derived application data;
• Loops;
• Briefings;
• Sessions; and
• Other account-associated application data.

Some information may be retained where required by law, necessary to resolve disputes, enforce agreements, prevent fraud or abuse, or otherwise permitted by applicable law.

7. Data Security

We take reasonable technical and organizational measures designed to protect information processed by Pactly against unauthorized access, alteration, disclosure, or destruction.

These measures include encryption of stored OAuth tokens using AES-256 and access controls within our application infrastructure.

However, no method of transmission or electronic storage is completely secure. We cannot guarantee absolute security of your information.

8. Third-Party Services

Pactly uses third-party infrastructure and services necessary to operate the application.

For example, Pactly currently uses Render to host application and database infrastructure.

Gmail and Google Calendar data are accessed through Google’s APIs when you authorize Pactly to access your accounts.

Third-party providers may process information according to their own terms and privacy policies. Pactly does not control the privacy practices of third-party services.

9. Google API Services

Pactly’s use of information received from Google APIs will comply with applicable Google API Services User Data Policy requirements, including requirements applicable to restricted Gmail data and other applicable Google user-data requirements.

Pactly requests only the Gmail and Google Calendar permissions necessary for its current functionality.

Pactly does not use Google user data for advertising.

Pactly does not sell Google user data.

Pactly does not transfer Google user data to data brokers.

Pactly does not use Google user data to determine creditworthiness, insurance eligibility, employment eligibility, or other similarly sensitive determinations.

Pactly does not use Google user data to train generalized artificial-intelligence or machine-learning models.

Pactly’s use of information received from Google APIs will adhere to Google’s Limited Use requirements where applicable.

Pactly is not endorsed by or affiliated with Google LLC.

10. Your Choices and Rights

Depending on where you live, you may have rights concerning your personal information, which may include the right to:

• Request access to personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your information;
• Withdraw authorization for Gmail or Google Calendar access;
• Request information about how your information is processed; and
• Exercise other rights provided by applicable privacy laws.

You may disconnect Pactly’s access to Gmail or Google Calendar through your Google account’s security and connected-app controls.

Deleting your Pactly account will initiate deletion of the Pactly data associated with that account as described above.

10a. Optional Beta Study

Pactly may offer an optional beta study to help measure whether detected commitments are real and useful. Participation is entirely voluntary and requires a separate, explicit opt-in in Settings — using Pactly is not consent to be studied.

If you opt in, you may rate completed commitments (for example: was this a real commitment, was it useful to see, did it prompt an action). Ratings store only your answers and a reference to the rated item. They never include email bodies or message content, never change your commitments, and are never shown to other users.

You may withdraw from the study at any time in Settings. Withdrawal stops all further rating collection immediately. Ratings you already gave are kept, because they were collected while your consent was active. You can also delete an individual rating at any time — contact support if you need help. Deleting your Pactly account deletes your ratings along with the rest of your data.

11. Children’s Privacy

Pactly is not directed toward children under the age of 13.

We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without appropriate authorization, we will take reasonable steps to delete that information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make material changes, we may update the “Last Updated” date and provide additional notice where required by applicable law.

Your continued use of Pactly after an updated Privacy Policy becomes effective means that you acknowledge the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, your personal information, Gmail data, or Google Calendar data, contact:

VR AI Solutions LLC
Pactly
Website: https://trypactly.com
Privacy Email: privacy@trypactly.com
Support Email: support@trypactly.com