Connected email and calendar accounts (Prometheus IRP)

Prometheus IRP (irp.prometheuspro.us) lets insurance agency users connect their own Google (Gmail, Google Calendar) or Microsoft 365 (Outlook) account. A user chooses to connect; nothing is connected automatically.

What we access, and why

• Send email (Gmail gmail.send, Microsoft Mail.Send): to send an email the user writes in Prometheus IRP from the user's own mailbox, only when the user clicks Send. We do not read, search, sync, or store the user's inbox or other emails.
• Calendar events (Google calendar.events, Microsoft Calendars.ReadWrite): to create, update, and delete calendar events for tasks and follow-ups the user creates in Prometheus IRP, only when the user chooses "Add to my calendar". We do not read or store the user's other calendar events.
• Basic profile (name, email address): to show which account is connected and to make sure a user connects only their own account.

What we store

• Access and refresh tokens, encrypted at rest, used only to perform the actions above.
• A record of each email sent from Prometheus IRP (recipient, subject, message text, time) on the related client account, so the agency has a history of its outreach.
• The ID of each calendar event Prometheus IRP created, so we can update or remove it.

What we do not do

• We do not sell Google or Microsoft user data.
• We do not use it for advertising.
• We do not share it with third parties, except as needed to provide the feature (Google or Microsoft themselves) or as required by law.
• We do not use it to develop, improve, or train artificial intelligence or machine learning models.
• No Prometheus employee reads it, except with the user's permission, for security purposes, or as required by law.

Google API Services User Data Policy
Prometheus IRP's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting and deletion

• A user can disconnect at any time in Prometheus IRP under My email. Disconnecting deletes the stored tokens and, for Google, revokes Prometheus IRP's access.
• Users can also remove access from their account settings: Google at https://myaccount.google.com/connections, Microsoft at https://myapps.microsoft.com.
• To ask us to delete data from a connected account, email clandrian@prometheuspro.us.