‹ Back to Lisa

Privacy Policy

Last updated: 19 June 2026

Lisa ("the Service") is operated by GRABO LLC ("we", "us"), Suite 9E, Eastern Commerce Center, 6000 South Eastern Avenue, Las Vegas, NV 89119, USA. This policy explains what data the Service collects, how it is used, and your choices. Questions: support@grabo.cc.

1. What we collect

• Account information. When you sign in with Google we receive your name, email address, Google account identifier and profile picture (OpenID Connect openid email profile).
• Tasks and content you create. The tasks, notes, files, contacts and reference details you add to the Service.
• Connected Google data (only if you connect it). With your explicit consent, the Service requests read-only access to:
  • Gmail (gmail.readonly) — to read messages relevant to your tasks;
  • Google Drive (drive.readonly) — read-only access to your Drive files, so Lisa can find and reference relevant documents;
  • Google Calendar (calendar.events) — to read your events and, at your request, create or update events (e.g. book a reminder or meeting).
  We do not request write/delete access to your Gmail or Drive (read-only there).

2. How we use it

We use your data solely to provide the Service to you: to organize your tasks, let your AI assistant reason over your information, and show you relevant calendar, mail and file context. We do not sell your data, and we do not use it for advertising.

3. Google API Services — Limited Use

Lisa's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use Google user data only to provide and improve user-facing features of the Service; we do not transfer or sell it; we do not use it for advertising; and humans do not read it except with your explicit consent, for security/abuse/legal reasons, or where data is aggregated and anonymized.

4. AI processing

To power the assistant, relevant task content and the data you connect may be sent to our AI model providers (e.g. Anthropic, OpenAI) strictly to generate responses for you. These providers process the data on our behalf and do not use it to train their models on your data under our API terms.

5. Storage & security

Your data is stored on our servers. OAuth access and refresh tokens are encrypted at rest. Access is restricted to the Service operating on your behalf.

6. Your choices

• Disconnect Google anytime in Settings → Your Google account. We revoke and delete the stored tokens. You can also remove access at myaccount.google.com/permissions.
• Delete your account / data. Email support@grabo.cc and we will delete your account and associated data.

7. Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.