Privacy Policy

1. Who we are

Metis Suite (the "Service") is a suite for mail, calendars and drives operated by AstraQ Cyber Defence ("we", "us", "our"), Engineers Colony Mothi Umari, Jatherpeth, Akola, Maharashtra, India 444005. You can reach us at contact@astraqcyberdefence.com.

2. Information we collect

Account information

• Your name, email address, and a hashed password (or magic-link sign-in records) when you create a Metis Suite account.
• Two-factor authentication data (TOTP secret and hashed backup codes), required for every account.
• Workspace membership records (workspaces you create or join, your role, and invitations you send or accept).

Metis Cloud billing

• If you subscribe to Metis Cloud: your console account (name, email address, and a hashed password) and your subscription records (plan, status, and billing period). Payments are processed by Dodo Payments; your card details go to them and never reach us.

Connected account data

• OAuth access and refresh tokens for each account you connect (Google, Microsoft, or Zoho), together with the account email address and provider, and the login details for each IMAP, CalDAV, S3, WebDAV, FTP or SFTP server you connect.
• Email data fetched from your provider on your behalf: message headers, bodies, attachments, labels, and thread information. Most of this is fetched on demand and displayed to you; a limited subset is cached (see Section 5).
• Calendar data fetched on your behalf: calendars, events, guests, and invitation responses.
• Drive data fetched on your behalf: file and folder listings, and file contents when you preview, download, or upload a file or save an attachment to a drive.
• Records you create in the Service: workflows and their run history, custom labels, snoozes, scheduled sends, mute lists, unsubscribe history, drafts, saved searches, pinned folders, MCP client grants, and AI conversation threads.

Technical information

• Standard server logs (IP address, browser type, timestamps, requested pages) used for security, rate limiting, and debugging.

We do not collect data for advertising, and we do not use tracking or advertising cookies. Cookies we set are strictly functional (session, active workspace, active mailbox, theme).

3. Google user data

When you connect a Google account, Metis Suite requests the scopes for the parts you connect (mail, calendar, drive, or any combination) from the following Google OAuth scopes:

• openid, userinfo.email, userinfo.profile — to identify the Google account you connected and display its email address and name inside the app.
• gmail.modify — to list and read your messages and threads; mark messages read or unread; star, archive, restore, move to trash, and label messages; create, update, and delete drafts; apply the inbox rules you configure; and retrieve message content for the AI features you invoke.
• gmail.send — to send email from your account only when you (or an action you explicitly approved or scheduled) trigger it: composing, replying, forwarding, scheduled "send later", and sending unsubscribe requests you initiate. Metis Suite never sends email autonomously.
• calendar — to list your calendars and events, create, edit, move, and delete events, invite guests, and answer invitations when you (or an action you explicitly approved) do so.
• drive — to browse, search, and preview your files, upload files and save email attachments where you choose, create folders, and rename, move, or delete files when you (or an action you explicitly approved) do so.

Limited Use disclosure. Metis Suite's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide and improve the user-facing features of Metis Suite described in this policy. We do not use it for any other purpose.
• We do not transfer Google user data to third parties except as necessary to provide or improve those user-facing features (see Section 6), to comply with applicable law, or as part of a merger, acquisition, or sale of assets after obtaining your explicit prior consent.
• We do not use or transfer Google user data for serving advertisements, and we do not sell it to anyone.
• We do not allow humans to read your Google user data unless (a) we have your affirmative agreement for a specific message, (b) it is necessary for security purposes such as investigating abuse, (c) it is necessary to comply with applicable law, or (d) the data has been aggregated and anonymized for internal operations.
• We do not use Google user data, including Gmail content, to develop, improve, or train generalized artificial intelligence or machine-learning models.

4. How we use your data

• Core mail, calendar, and drive features — displaying your folders, messages, and threads; sending, replying, and forwarding; drafts; attachments; labels; archive, trash, star, and read-state changes; snooze and scheduled send; showing, creating, and editing events; browsing, previewing, and managing files; search across mail, events, and files; and the workflows you configure.
• AI features you turn on — automatic message classification into labels, smart reply suggestions, thread summaries, workflow questions, and the AI agent, which can read and act on your mail, calendars, and drives only within the tools and approvals you grant it in the chat interface. Sending, deleting, and calendar, drive, or workflow changes require your explicit in-chat approval.
• Service operation — authentication, two-factor verification, workspace management and sharing of mailboxes, calendars, and drives, rate limiting, abuse prevention, and debugging.
• Transactional email — sign-in links, verification emails, password resets, and workspace invitations from your instance, and verification emails for your Metis Cloud console account.
• Billing — running your Metis Cloud subscription, and suspending and deleting an instance whose subscription has ended.

5. What we store and for how long

• OAuth tokens and server logins are encrypted in our database and used solely to reach your provider or server on your behalf. They are deleted when you disconnect the account or delete your Metis Suite account, and we ask the provider to revoke the grant where the provider supports it.
• Message cache — to avoid re-downloading the same content, we cache the bodies of messages you open or that the features you use require (for example thread summaries and smart replies), along with their analysis results, keyed to your account. We do not maintain a full copy of your mailbox.
• Derived records — labels assigned to messages, thread summaries, unsubscribe history, scheduled items, saved searches, and workflow run history are stored so the features work across sessions.
• AI agent conversations are stored so you can revisit them, and can be deleted by you at any time.

All data is encrypted in transit (TLS). On Metis Cloud, your instance and its database run on their own storage volume on our servers in Helsinki, Finland, and are backed up continuously to Cloudflare R2, which encrypts them at rest. Account tokens and server logins are also encrypted by Metis Suite itself before they are stored. Access to production systems is restricted to authorized personnel of AstraQ Cyber Defence and protected by strong authentication.

When you disconnect an account, we delete its OAuth tokens or server login and cease all access to it. When you delete your Metis Suiteaccount, or on a verified request to contact@astraqcyberdefence.com, we delete your account data, cached message content, and derived records within 30 days, except where retention is required by law. When a Metis Cloud subscription ends, the instance is suspended, and 30 days later it is deleted together with its backups. Server logs are retained for up to 90 days.

6. Sharing and third-party processors

We never sell your data. We share it only with the processors needed to run the Service:

• Your providers (Google, Microsoft, Zoho, and the servers you connect) — every mail, calendar, and drive action you take is executed against your provider's API or server.
• Infrastructure hosting (Hetzner) — dedicated servers in Helsinki, Finland, that run your Metis Cloud instance and its database, which stores the data described in Section 5.
• Backups and DNS (Cloudflare) — continuous backups of your instance's database in Cloudflare R2, deleted with the instance, and DNS for trymetis.email addresses.
• Console hosting (Vercel) — runs the Metis Cloud console where you sign up, pay for, and manage your instance, and stores your console account and subscription records.
• Payments (Dodo Payments) — processes Metis Cloud subscription payments. Your mail, calendars, and files are never shared with Dodo Payments.
• Console email (Resend) — delivers verification email for your console account. Your mail, calendars, and files are never shared with Resend. Email from your instance, such as sign-in links and invitations, is delivered to your console inbox unless your instance owner sets up their own mail service.
• AI model providers you choose — Metis Suite does not provide AI models. AI features use the provider whose key your instance owner configures. When an AI feature you turned on runs, the messages, events, or files it requires are sent to that provider, under the owner's agreement with it, solely to generate that response. AI features never send your whole mailbox, calendar, or drive.

If you connect an MCP client, the external AI client you authorize via OAuth can access your mail, calendars, and drives in the workspaces and through the tools you permit. You control these grants and can pause or revoke them at any time in settings.

If you are a member of a workspace, mailboxes, calendars, and drives shared with that workspace are visible to its other members.

We may disclose data where required by law, court order, or a governmental authority with jurisdiction, or where necessary to protect the rights, safety, or security of the Service or its users.

7. Your rights and choices

• Disconnect any account at any time from Settings → Connected Accounts; this deletes its tokens or login and revokes our access.
• Revoke Metis Suite's access directly from your provider: Google Account → Security → Third-party access, or the equivalent Microsoft and Zoho settings.
• Request access to, correction of, or deletion of your personal data, or raise a complaint, by emailing contact@astraqcyberdefence.com.
• Under India's Digital Personal Data Protection Act, 2023, you have the right to access, correct, and erase your personal data, to nominate a representative, and to grievance redressal.

Grievance Officer: AstraQ Cyber Defence, Engineers Colony Mothi Umari, Jatherpeth, Akola, Maharashtra, India 444005, contact@astraqcyberdefence.com. We acknowledge grievances within 72 hours and aim to resolve them within 15 days.

8. Children

The Service is not directed to children. You must be at least 18 years old, or the age of majority in your jurisdiction, to use Metis Suite. We do not knowingly collect personal data from children; if you believe a child has provided us data, contact us and we will delete it.

9. International transfers

Metis Cloud instances and their data are stored in Finland, in the European Union. Our processors may store or process data in countries other than yours (including the United States and the European Union). Where that happens, we rely on the processor's contractual and technical safeguards, and data remains protected as described in this policy.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the app or by email before they take effect, and the effective date above will be updated. Continued use of the Service after a change takes effect constitutes acceptance of the updated policy.

11. Governing law and contact

This policy is governed by the laws of India, and any disputes are subject to the exclusive jurisdiction of the courts at Akola, Maharashtra, India. Questions about this policy: contact@astraqcyberdefence.com.