Privacy Policy

Total Agent™ LLC · Last updated July 11, 2026

Total Agent (“Total Agent,” “we,” “us”) provides an AI assistant (“AGENTA”) that helps licensed real-estate agents manage their email, calendar, and client relationships. This policy explains exactly what Google user data we access when you connect a Google account, how we use it, who we share it with, how we protect it, and how we retain and delete it.

1. Google user data we access

When you connect your Google account, you grant Total Agent the following OAuth scopes. We request the narrowest set of scopes needed to run the features you use:

  • Gmail — read (gmail.readonly). We read the content of your email messages (subjects, bodies, sender and recipient addresses, and attachments) so AGENTA can learn your writing voice, keep client conversations in sync, classify messages, and surface the context you need to follow up.
  • Gmail — send (gmail.send). We send email on your behalf — the replies and messages you compose or approve, and (where you enable it) automated follow-ups to your existing contacts.
  • Google Calendar — events (calendar.events). We create, read, update, and delete calendar events, such as showings and appointments you or AGENTA schedule.
  • Google Calendar — read (calendar.readonly). We read your list of calendars to identify the correct calendar to write events to. We do not create or delete entire calendars and do not change your calendar sharing or settings.

2. How we use your Google data

We use your Google user data only to provide and improve the user-facing features of AGENTA, including:

  • Learning your writing voice so drafts sound like you.
  • Keeping your client conversations, contacts, and deal timelines in sync across email and calendar.
  • Classifying and organizing incoming email.
  • Drafting and (where you enable it) sending replies and follow-ups.
  • Scheduling and updating showings and appointments.

We do not use your Google data for advertising, and we do not sell it.

3. How we share and transfer your data

We do not sell your Google user data or share it with data brokers, advertisers, or any third party for their own purposes. We share it only with the service providers (sub-processors) that operate features you use, and only to the extent needed to run those features:

  • Nylas— provides the secure connection to Gmail and Google Calendar. Your Google OAuth tokens are held by Nylas's token vault; Total Agent stores only an opaque grant identifier, not your Google credentials.
  • Anthropic— provides the Claude AI models that power AGENTA's writing, classification, and drafting. Email and calendar content included in a request is used only to generate your result. Under Anthropic's commercial terms, this data is notused to train Anthropic's models.
  • Supabase — hosts our application database (US region), where account data and email/calendar metadata are stored.

We do not transfer your Gmail or Calendar content to any third-party service that uses it to train or improve AI/ML models.

4. How we protect your data

  • All access uses OAuth 2.0; we never see or store your password.
  • Your Google access and refresh tokens are held by Nylas's vault, not in our database.
  • Data is encrypted in transit (TLS).
  • We do not store the full bodies of your synced inbox email at rest — message bodies are fetched live from Google at the moment you view them. We store limited metadata (such as subject, sender and recipient addresses, and a short snippet) needed to organize your conversations.
  • All stored data is isolated per user; one agent's data is never accessible to another.

5. Data retention and deletion

We retain your Google-derived data only while your account is active and your Google connection is in place. You are in control:

  • Disconnect Google. When you disconnect your Google account in Settings → Connected Accounts, we revoke the connection (the Nylas grant) and delete the email and calendar data we synced from that account, typically immediately and within 30 days at most.
  • Delete your account. When you delete your Total Agent account, we revoke all connected Google grants and permanently delete your associated data within 30 days.
  • Revoke directly with Google.You can also revoke Total Agent's access at any time from your Google Account permissions page.

To request deletion or ask a question about your data, email us at privacy@bytotalagent.com.

6. Limited Use disclosure

Total Agent's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In addition, the use of raw or derived user data received from Google Workspace APIs will adhere to the Limited Use requirements and will not be used to develop, improve, or train generalized AI and/or ML models beyond your own personalized experience.

7. Contact

Questions about this policy or your data can be sent to privacy@bytotalagent.com.