This Google Workspace Privacy Notice explains how Arnica, Inc. (“Arnica,” “we,” or “us”) accesses, uses, stores, protects, and shares Google Workspace data in connection with the Arnica Google Chat integration. This notice supplements the Arnica Privacy Policy. If there is a conflict concerning Google Workspace data, this notice controls.

Google Workspace data we access
Depending on the features enabled by your organization, the integration may access:
- Identity and directory information, such as a user’s name, email address, profile information, organization identifiers, and other directory information needed to identify users and connect the integration.
- Google Chat interactions, including messages or commands sent to the Arnica bot, actions taken through buttons or dialogs, security decisions, dismissal explanations, and related interaction metadata.
Arnica accesses only the Google Workspace data necessary to provide the integration’s disclosed functionality. The integration does not access unrelated Google Chat conversations.

How we use Google Workspace data
Arnica uses this data to:
- Connect, authenticate, configure, and operate the Google Chat integration.
- Deliver security alerts, notifications, and other requested messages.
- Display and process user actions and security decisions.
- Process dismissal explanations and, where applicable, perform AI-assisted analysis of those explanations.
- Maintain, secure, troubleshoot, and support the integration.
- Comply with applicable legal obligations.
Google Workspace data is not used for advertising, profiling for advertising, determining creditworthiness, or sale to data brokers or information resellers.

Sharing and service providers
Arnica may share Google Workspace data with contracted service providers that help us operate, secure, support, or host the integration. This may include cloud infrastructure, security, support, and AI service providers.
Service providers receive only the data reasonably necessary to perform services for Arnica and are required to protect that data and use it only for the contracted purpose. When an AI provider processes a dismissal explanation, the data is provided solely to perform the applicable user-facing analysis and may not be used by that provider for independent purposes or to train generalized or non-personalized AI models.
Arnica may also disclose data when required by law, to protect users or the security and legal rights of Arnica or others, or with the customer’s or user’s consent.

Data protection
Arnica uses reasonable administrative, technical, and organizational safeguards designed to protect Google Workspace data against unauthorized access, use, alteration, loss, or disclosure. These safeguards include access controls, controlled server environments, encryption in transit, encryption at rest, and limiting access to personnel and service providers with a legitimate need to process the data.
No method of transmission or storage is completely secure, but Arnica continually evaluates its safeguards in light of the sensitivity of the data it processes.

Retention and deletion
Arnica retains Google Workspace data only for as long as necessary to operate and support the integration, provide the requested functionality, maintain security and audit records, and meet applicable contractual or legal obligations.
When Google Workspace data is no longer required for these purposes, or following an approved deletion request, Arnica deletes or de-identifies it in accordance with its retention procedures. Limited copies may remain temporarily in protected backups or may be retained when required by law.
Users and administrators may request deletion of Google Workspace data by contacting privacy@arnica.io. Arnica may verify the requester’s identity and authority before completing a request.

Artificial intelligence restrictions
Arnica does not use, retain, or transfer data obtained through Google Workspace APIs to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models.
Any AI processing of Google Workspace data is limited to providing the specific user-facing functionality described in this notice. Arnica does not permit its AI providers to use Google Workspace data to train generalized or non-personalized AI or machine-learning models.
Arnica’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Contact us
Questions or requests relating to this notice or Google Workspace data may be submitted to:
Arnica, Inc.
Email: privacy@arnica.io
General Privacy Policy: https://www.arnica.io/legal/privacy