Privacy policy

Effective October 28, 2026

This policy covers GRABO Builder, its Windows connector, and the related Fleet administration features. GRABO Builder is a work service for people and organizations with an authorized account.

Account and session information

We use your name, email address, account identifier, and assigned role to sign you in and control access. When you sign in with Google, we receive your Google account identity, including your verified email address and basic profile information. Signing in does not grant access to your Gmail messages or Drive files.

We process the prompts, files, tool results, and outputs used in your sessions to carry out tasks and let you return to your work. Authentication cookies keep you signed in. Connection records and diagnostics help operate the service and investigate failures.

Windows computers

The connector sends computer identity, Windows and hardware details, connection status, and diagnostic information to the service. Desktop capabilities can access the screen, local files, installed applications, and commands on an assigned computer.

Organization administrators manage desktop assignments and can view or control computers within their access. Where work insights are enabled, recorded desktop activity, application names, window titles, and saved activity notes can contribute to work summaries. Use the connector only on a computer you are authorized to connect.

Optional Google access

Choosing Connect Google separately authorizes the Google services shown on the consent screen. Depending on the permissions granted, your agent can read and work with Gmail messages and attachments, Drive files including Docs, Sheets and Slides, calendar events, contacts, the company directory, and tasks.

These tools support the work you ask the agent to do, including searching or summarizing information and making requested changes. Granted permissions can allow sending messages, editing or sharing files, changing calendar events, and deleting data. Review the requested access before connecting.

The service stores the authorization grant on the server so it can continue authorized work. Google data returned to a session can be included in its conversation, files, and task results.

Company email and daily work summaries

For organization-managed accounts, a company administrator may separately authorize access to company mail through Google Workspace. Fleet uses company email associated with assigned users, together with available desktop activity, to prepare daily work summaries.

This collection reads message headers, subjects, timestamps, labels, and short snippets. It does not collect attachments or full message bodies for the daily summary. Saved summaries and source details are available to Fleet super administrators. These reports can include email subjects, senders, times, and links to the original messages.

AI processing and service providers

AI providers process prompts, connected data, and tool results used in an agent's task. The provider depends on the model and service configured for that session. Cloud hosting and authentication providers also process information needed to run the service.

For Fleet daily work summaries, selected desktop evidence and company email metadata and snippets are sent through LunaRoute to the configured language model. The resulting summary and its supporting source information are stored by Fleet. Data used in these features may be processed outside your country.

Storage and access

The service uses HTTPS and account permissions to protect access to data. Server-side access grants are kept separately from member workspaces. Authorized organization administrators and people granted access to a session or computer may see information within that access.

Account records, saved sessions and files, diagnostic reports, and daily summaries can remain stored until removed through the applicable service or handled through a deletion request. Disconnecting Google stops that connection's future access; it does not automatically erase data already included in a session, file, or report.

Your choices and deletion requests

You can disconnect the optional Google connection from your account menu in Builder. You can also review and revoke access in your Google Account connections. This does not remove a separate company Workspace authorization managed by your organization.

Contact your organization administrator to change computer assignments, stop organization-managed collection, or remove organization-held reports. For access, correction, or deletion of data held by GRABO Builder, email nimo@grabo.com from your account address and identify the account, computer, or records concerned. We may need to verify your authority before acting on the request.

Contact and changes

Send privacy questions to nimo@grabo.com. Changes to this policy will appear here with an updated effective date.