Quinn privacy policy

Stackpoint, Inc. · effective September 2026

Quinn is an internal scheduling assistant operated by Stackpoint for its own team members. This policy covers the Google user data Quinn accesses when a Stackpoint team member connects a Google account, and the information Quinn handles about the people it schedules with.

Google user data

When a team member connects a Google account, Quinn requests read-only access to that account's contacts (the contacts.readonly and contacts.other.readonly scopes) and the account's email address (to label the connection). Quinn uses this data for one purpose: when that team member asks it to schedule with a person by name, Quinn searches their contacts for that person's email address or phone number. Searches happen live; Quinn does not copy, sync or store the contact list. The credential Google issues is stored encrypted on Stackpoint's server, is used only for that team member's own requests, and is never shared with other team members, other systems, or third parties. Quinn does not write to Google Contacts.

Quinn's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used for advertising, is not sold, and is not used to train machine-learning models.

How Google user data is protected

• In transit. Every call Quinn makes to Google APIs, and every page Quinn serves, uses TLS (HTTPS).
• At rest. The OAuth credential Google issues is encrypted with symmetric AES-based encryption (Fernet) before it is written to storage. The encryption key is held only in the server's environment configuration, never on disk beside the data and never in the code repository.
• Access. A credential is decrypted only to run a contact search requested by the team member who connected the account. Quinn never uses one team member's credential on another team member's thread, and a credential is never shown in Slack, logs or messages.
• Minimization. Quinn requests read-only scopes only, reads only names, email addresses, phone numbers and organizations, searches one name at a time, and returns at most ten matches per search. It does not build or keep a copy of the contact list; the search result is used to complete that scheduling request.
• Retention and deletion. The credential is kept until the team member revokes Quinn's access at myaccount.google.com/permissions or asks Stackpoint to delete it. Revocation takes effect immediately and Stackpoint deletes the stored credential.
• Operations. Quinn runs on a hosted server operated by Stackpoint. Access to its configuration and storage is limited to Stackpoint's engineering operator.
• Incidents. If Stackpoint becomes aware of unauthorized access to Google user data, it will notify the affected team members and revoke the affected credentials.

AI processing

Quinn interprets scheduling requests with a large language model, Claude, accessed directly through Anthropic's API. When a team member asks Quinn to schedule with a person by name, the matching contact's name, email address and phone number are passed to the model so it can complete that one request. Anthropic's commercial terms of service prohibit Anthropic from training its models on data submitted through its API. Google user data is sent to no other third-party service, and Stackpoint does not use it to create, train or improve any machine-learning or AI model, generalized or otherwise.

Calendar

For Stackpoint team members, Quinn reads free/busy and event details from their Stackpoint Google Calendar and creates, moves or cancels the events it schedules, through access Stackpoint's Google Workspace administrator granted. Nothing outside the calendar is read.

Place search

When place search is enabled, text you enter in the Place field is sent to Google Maps to suggest matching street addresses. Quinn saves the address you choose as your scheduling preference; it does not keep a database of address search suggestions. You can edit or remove a saved address.

Place search uses Google Maps Platform and is subject to the Google Maps terms and Google privacy policy.

People Quinn schedules with

Quinn keeps the messages exchanged on a scheduling thread, the email address or phone number it was given for you, and the times you picked, so it can complete the scheduling and follow up. This is used only to schedule the meeting in question. You can reply STOP to any text from Quinn to end texts from it, and ask the Stackpoint team member to remove your details.

Between team members

Each team member's calendar contents, preferences, contacts and conversations are visible only on their own threads. When Quinn schedules a meeting for several team members, it uses the others' calendars as free or busy time and honors their preferences without disclosing them. Stackpoint's operator of Quinn can read threads for support.

Revoking access

A team member can revoke Quinn's access to their Google account at any time at myaccount.google.com/permissions; the stored credential stops working immediately and Stackpoint deletes it. Stored credentials can also be deleted on request.

Contact

matt@stackpoint.com