Last updated September 29, 2026
Cyto is operated by Adaptive Intelligence Systems LLC. This page covers Compass, Cyto's internal tools, this website, and our research surveys. Questions or requests go to sam@getcyto.ai, and a person will answer.
Google accounts: your email address and sign-in identity (openid, userinfo.email), read access to your mail (gmail.readonly), and, only if you turn on drafting, permission to create drafts (gmail.compose). Google offers no permission that allows drafts without also allowing sending, so gmail.compose technically permits sending. Compass contains no code that sends, and an automated test in our code blocks one from being added.
Microsoft accounts: depending on the version you connect, either read-only mail access (Mail.Read, User.Read), or mail and calendar access that allows creating drafts (User.Read, Mail.ReadWrite, Calendars.ReadWrite). Your organization's administrator approves these and can withdraw them at any time.
Compass does not keep an archive of your mailbox. It reads messages through Google's or Microsoft's API when it needs them. Draft replies are written straight into your own Drafts folder, and Compass does not keep a copy of the draft text. Summaries and briefs do reflect the messages they came from, and those are stored as described above.
We also run small tools that read Cyto's own mailboxes, with read-only access (gmail.readonly). They are used only on Cyto's own accounts. They read the sender, subject, date and Gmail's short preview of new messages, never the full message or attachments, to alert us when someone we are waiting on has written. The alert is emailed to us. If we turn on automatic summaries, the sender, subject and preview are also sent to Anthropic (listed below) to write a one-line summary. These tools run on Cyto's own computer and keep only a note of which messages they have already seen and the alerts they raised.
Our surveys have their own notice, which explains what they collect and how answers and emails are kept apart: getcyto.ai/research/privacy.
Cyto's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice, data from Google APIs is used only to provide the features described on this page. It is not sold, not used for advertising, not used to decide credit or lending, and not used to develop, improve or train general-purpose AI or machine learning models. It is shared with the service providers below only as needed to run those features.
No one at Cyto reads your messages as routine. A person may look at data tied to your account only when you ask us to (for example, to fix a problem you report), when needed for security, such as investigating abuse, or when the law requires it.
Cyto's products are business tools and are not meant for anyone under 13. We do not knowingly collect their information.
If this policy changes, we will update this page and the date at the top. If a change affects how your data is handled, we will tell connected users directly.