This policy explains how AI Token Insights handles information through the AI Token Insights website and AITI Newsroom, our private newsletter-archiving and research tool. AITI Newsroom is operated for our editorial work; visiting the website does not connect your Gmail account or give us access to your mailbox.

Website information

Our web server may record technical information such as your IP address, requested pages, browser information, request times, and error details. We use these records to operate, secure, and troubleshoot the website.

The website is configured to use Google Analytics to understand visits and improve its content. Analytics may collect page views, referral information, browser and device information, and identifiers stored in cookies, depending on your browser and the applicable settings. Google processes analytics information under its applicable terms and privacy policy. Website analytics is separate from AITI Newsroom; we do not send Gmail message contents or mailbox credentials to Google Analytics.

You can manage cookies through your browser settings. Blocking cookies or analytics requests may limit measurement. External links lead to services with their own privacy practices.

If you contact us, we use the information you provide to respond and address your request.

AITI Newsroom and Gmail access

AITI Newsroom accesses only a Google account whose authorized user explicitly connects it through Google’s authorization process. We request the Gmail read-only permission, gmail.readonly.

This permission technically allows reading mailbox data. Our collector limits its searches to configured newsletter senders and specified date ranges, and verifies that it is connected to the intended account before collecting messages. It does not send email, change labels, mark messages read, move messages, or delete email from Gmail.

For matching newsletters, we may collect:

  • The message identifier, sender and recipient headers, subject, and message dates.
  • The original email, including its HTML and plain-text content and any attachments included in the original message bytes.
  • Extracted text, source links, content hashes, and records needed to detect duplicates and verify collection.
  • Label information used to check that collection has not changed mailbox state.

Attachments are not executed, and the collector does not load remote email images. Sender names and dates are treated as supplied information, not proof of authenticity.

How newsletter information is used

We use collected newsletters to maintain a private research archive, locate relevant source material, identify research leads, and support human-reviewed editorial work. A newsletter is not automatically treated as verified evidence or published as an article.

Access to mailbox-derived information is limited to the authorized operator and tools used for these disclosed functions. We do not make the mailbox archive publicly searchable. We do not sell Gmail-derived information, use it for advertising or creditworthiness decisions, or use it to train or improve generalized AI or machine-learning models.

Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

Storage, processing, and service providers

The rebuilt newsletter collector stores original emails and complete extracted text in a private archive on the operator’s computer. Its Google authorization credentials are stored separately with restricted access. Our server-based workflow receives operational summaries, including message identifiers, content hashes, and processing counts—not original email bodies or Gmail authorization credentials.

Our historical research library includes newsletter excerpts stored with Pinecone. The rebuilt collector does not currently upload its newly archived newsletters to an external embedding or vector-search service. Before enabling that transfer, we will disclose the provider, information transferred, and purpose, and obtain the connected account user’s authorization where required. Permission to connect Gmail is not treated as blanket permission for unrelated processing.

Website hosting, Google Analytics, Google authorization services, and research-storage providers process information needed for their respective functions. Depending on the service, information may be processed outside your country. We limit disclosures to the stated purposes and applicable provider arrangements. Google-derived information remains subject to Google’s restrictions on use and transfer.

Retention, revocation, and deletion

The newsletter research archive does not currently have an automatic expiry period. Archived messages and research records remain stored until deliberately removed; they are not automatically erased when Google access is revoked.

The connected account user can revoke AITI Newsroom’s access through the third-party connections section of their Google Account. Revocation prevents further authorized access but does not delete previously collected information.

To request deletion of collected messages, derived research records, or saved authorization credentials, contact us using the address below. We may need to verify your authority over the account or information. Deletion requests are handled manually and include identifying applicable local records and third-party research-storage copies. We will explain any information that must be retained for a legitimate legal or security reason and any backup-related limitations rather than promising immediate erasure from every copy.

Website logs, analytics records, and correspondence have separate retention settings and purposes. Contact us for information about the records relevant to your request.

Security and your choices

We use restricted access, separated credentials, and encrypted network connections for the newsletter integration. These measures reduce risk but cannot guarantee absolute security.

Depending on applicable law, you may have rights to request access, correction, deletion, or restrictions on the use of personal information. Contact us to make a request or ask about our practices. Do not send passwords, authorization tokens, or other account secrets.

Changes and contact

We may update this policy when our services or information-handling practices change. Material changes to Google-data access, use, or sharing will be disclosed before the new processing begins, with renewed consent where required.

For privacy questions or requests, contact AI Token Insights at eugene.cinq@aitokeninsights.com.