Last updated May 17, 2026

Privacy Policy

How Pathway AMS collects, uses, protects, and deletes information for agency case management, calendar sync, mailbox sync, and provider email send.

Information We Collect

We collect account profile details, agency workspace information, uploaded case files, CRM records, activity history, and integration metadata needed to operate the service.

When you connect Google or Microsoft, we store encrypted OAuth tokens, account identifiers, granted scopes, sync cursors, and webhook metadata needed to maintain the connection.

Google Calendar And Gmail Data

Google Calendar access is used to create, update, and sync calendar events that are connected to work activities in Pathway AMS.

Gmail read access is used to sync messages that match CRM clients or cases so authorized users can see client correspondence history in Pathway AMS. We store message metadata, participants, dates, labels, attachment indicators, and a sanitized excerpt needed for the CRM record.

Gmail send access is used only when an authorized user sends a client email from Pathway AMS through their connected Google account.

How We Use Information

We use information to authenticate users, provide CRM workflows, process uploaded illustrations, sync calendars, log matched client correspondence, send user-initiated provider email, support customer requests, secure the service, and meet legal obligations.

We do not sell Google user data, use it for advertising, or use it to train generalized AI models.

Google API Limited Use

Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including Limited Use requirements.

Sharing And Vendors

We share information only with service providers that help us operate Pathway AMS, such as hosting, authentication, storage, monitoring, and email delivery providers. We do not allow vendors to use customer data for their own marketing.

Security And Retention

We use tenant access controls, encrypted token storage, transport encryption, and operational logging. OAuth tokens are removed when an integration is disconnected.

CRM records and synced correspondence remain in the workspace until deleted by an authorized user or through a data deletion request, subject to backup and legal retention requirements.

Your Choices

You can disconnect Google or Microsoft integrations in Settings, remove Pathway AMS access from your Google Account permissions page, or request deletion of account data.

For privacy or deletion requests, contact datasciencetrek@gmail.com.