Privacy policy

Effective date: September 30, 2026. This policy covers CMC+CO Client Intelligence, an internal business application for authorized CMC+CO staff and invited testers.

Information accessed and why

Google Sign-In supplies your verified email address, name and profile identity to authenticate your account and apply its assigned access permissions. Connecting Google Workspace requests read-only Gmail, Calendar and Drive access. Gmail sender and recipient details, subjects, message snippets and dates help match clients and identify recent interactions. Calendar event titles, times, attendees and descriptions support meeting preparation and daily briefings. Drive files you search for or import can supply document content and meeting evidence.

The application also processes client and contact records, ownership assignments, business notes, uploaded documents, questions, generated outputs and review actions. These support portfolio management, briefings, call preparation, answers and draft business content. Features available depend on the environment and your role.

AI processing and sharing

When an AI feature is enabled and used, relevant business records, document excerpts, email or meeting context, your question and writing examples may be included in prompts sent to Google's Gemini API to generate the requested answer or draft. Review sensitive material before importing it or requesting AI processing. Gemini and the hosting and database services process data to operate these features; their applicable service terms also govern that processing.

Authorized application users can view information within their assigned portfolio; administrators have broader access to manage accounts and the application. Client-facing drafts require human review. A separately authorized internal briefing sender can send briefing emails to configured internal recipients; ordinary Workspace access is read-only.

Google data commitments

CMC+CO Client Intelligence's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used to provide the user-facing business features described here. It is not sold, used for advertising or creditworthiness, or used by this application to train a generalized AI model. Transfers are limited to providing these features, security, legal obligations or other uses permitted by that policy. Human access to Google data must be limited to the user-facing features and permitted support, security or legal purposes.

Storage, cookies and retention

The application stores account information, business records, cached Workspace information and generated artifacts in its configured database and document storage. OAuth tokens are encrypted before storage. An essential session cookie maintains sign-in; additional security cookies protect authorization and form actions. Signing out ends your application session. Access controls restrict private application routes.

Records can remain after sign-out or Google permission revocation. There is no fixed automatic deletion period stated for this deployment. Disconnecting Workspace in Settings removes that connection and its cached Gmail and Calendar records; separately saved client records, imported files and generated artifacts may remain. Ask the application administrator to review and remove those records and any retained backups where applicable.

Your controls and contact

You can disconnect Workspace in Settings and revoke Google access through your Google Account connections. Revocation prevents future authorized Google access but does not itself delete already stored records. For access, correction, deletion, privacy questions or security concerns, contact the CMC+CO application administrator or the CMC+CO person who invited you, using your existing organizational contact channel. Identify this application and the records concerned; do not send passwords or access tokens. CMC+CO's public website is cmcandco.com.

Updates to this policy will be published on this page with a revised effective date. Material changes to Google data use require appropriate notice and consent before that use.