Google Workspace and Photos API Limited Use

The use of raw or derived user data received from Google Workspace or Google Photos APIs by iMothership will adhere to the Google API Services User Data Policy and the Limited Use requirements.

Our Limited Use commitments include:

• We access only the Google user data needed to provide user-requested, visible features.
• We do not sell Google user data or use it for advertising, credit decisions, or data-broker activities.
• We do not use or permit the use of raw, aggregated, anonymized, or derived Google Workspace or Photos data to create, train, or improve foundational or generalized AI/ML models.
• Google user data is transferred to an AI provider only to perform a user-requested feature and only through the provider's business or API service under a no-generalized-training configuration.
• Consumer AI endpoints and free service tiers that may use submitted content for generalized model training are not approved for processing Google Workspace or Photos user data.
• Where a provider offers an opt-out or Zero Data Retention control, that control must be enabled before Google user data may be processed by that provider.

Third-party service configurations

• Anthropic: commercial API.
• Google: billing-enabled Gemini or Vertex AI API.
• OpenAI: API platform business data controls.
• Replicate: authenticated API; downstream models are disclosed below.
• Fireworks AI: authenticated API with no-training data handling.
• Groq: GroqCloud API with data controls.
• ElevenLabs: API with model-improvement data sharing disabled.
• SpaceX AI / xAI: developer API using dedicated API keys and Zero Data Retention when Google user data is processed.

Multi-model services and downstream models

Replicate is used as a model-hosting platform for media-generation features. Current downstream models include Black Forest Labs FLUX Schnell, MiniMax Video-01, ByteDance PuLID, Clarity Upscaler, and Meta MusicGen. Some projects can also use a model selected in that project's configuration. The same Limited Use restrictions apply to every selected downstream model; a model may not receive Google user data if its terms or configuration permit generalized model training.

Self-hosted and offline models

When iMothership uses a self-hosted or offline model, execution takes place within private, isolated infrastructure. Google Workspace or Photos user data is processed locally and is not transmitted back to the model provider for training, model improvement, advertising, or any other secondary purpose.

Microsoft 365 and Outlook API Data Use

The use of raw or derived user data received through Microsoft Graph, Outlook, Exchange, or Microsoft 365 APIs by iMothership will comply with the Microsoft APIs Terms of Use, the Microsoft Privacy Statement, and applicable privacy and data-protection requirements.

Our Microsoft API data commitments include:

• We request only the minimum Microsoft API permissions and data needed to provide user-requested application features.
• We use Microsoft API data only within the permissions expressly granted by the customer or end user.
• We do not sell, redistribute, or use raw, aggregated, anonymized, or derived Microsoft API data for advertising, marketing, or data-broker activities.
• We do not use or permit the use of Microsoft 365, Outlook, Exchange, or Microsoft Graph data to create, train, or improve foundational or generalized AI/ML models.
• Microsoft API data is transferred to an AI provider only to perform a user-requested feature and only through the provider's business or API service under a no-generalized-training configuration.
• Where a provider offers an opt-out or Zero Data Retention control, that control must be enabled before Microsoft API data may be processed by that provider.
• We apply appropriate retention and deletion controls and delete Microsoft API data when it is no longer required for the requested feature or when access is withdrawn, subject to applicable legal obligations.

Self-hosted and offline processing

When iMothership uses a self-hosted or offline model, Microsoft 365 and Outlook data is processed within private, isolated infrastructure. It is not transmitted back to the model provider for training, model improvement, advertising, or any other secondary purpose. The third-party service configurations and downstream-model restrictions listed above apply equally to Microsoft API data.

Managing Microsoft access

Users and administrators can review or revoke iMothership's Microsoft access through Microsoft My Apps or, for personal Microsoft accounts, through Microsoft account consent management.

EU AI Act Transparency and Responsible Use

iMothership is committed to developing and using AI in accordance with applicable requirements of the EU Artificial Intelligence Act (Regulation (EU) 2024/1689), including its risk-based governance, transparency, human-oversight, and AI-literacy principles.

Our EU AI Act commitments include:

• We inform users when they are interacting directly with an AI system unless that interaction is obvious from the context.
• We identify or label AI-generated or manipulated content where required, including applicable deepfake and public-interest content disclosures.
• We assess AI features according to their intended purpose and risk, and do not permit prohibited manipulative, exploitative, discriminatory, or unlawful uses.
• We maintain meaningful human oversight for consequential uses and do not present AI output as a substitute for professional judgment where a person's rights, safety, or access to essential services may be affected.
• We provide appropriate information about an AI feature's intended use and material limitations so users can understand and critically evaluate its output.
• We promote an appropriate level of AI literacy for staff and others operating AI systems on our behalf.
• We apply privacy, security, data-governance, provider-review, monitoring, and incident-handling controls appropriate to the AI system and its use.

The legal classification of an AI system depends on its intended purpose and the context in which it is deployed. Customers remain responsible for assessing requirements specific to their own use of iMothership. This statement describes our operating commitments and is not a blanket certification that every use case is compliant.