Information we process
- Account and workspace information: names, email addresses, workspace membership, roles, connected identities, and settings used to identify users and enforce access.
- Product work: information you or your organization add, including documents, opportunities, assessments, comments, files, linked resources, questions, and generated analyses or artifacts.
- Connected Google information: the identity and authorization information needed for an enabled integration; selected Drive file and folder metadata and contents used for authorized imports, browsing, or exports; and relevant Chat space, message, and author information for the interactions or collection you authorize.
- Connected business systems: Jira issue information; Confluence pages and related information if your organization enables Confluence; and customer-authorized CRM and support records, such as feedback, ticket descriptions, comments, and associated customer or contact information needed for sentiment and support-ticket analysis.
- Service records: timestamps, request and audit records, errors, feature usage, AI usage and cost records, and other technical information needed to operate and protect the service.
- Support information: contact details and information you choose to include in a support request.
How we use information
We use information to provide the workspace, authenticate users, apply permissions, retrieve relevant evidence, generate requested analyses and artifacts, run authorized background workflows, maintain audit records, troubleshoot problems, prevent misuse, and respond to support requests. Connected information is used for the features you enable and authorize.
Google Chat and Drive
Ask Sense responds to addressed questions and artifact requests using the requesting employee’s linked Product Inflection access. Shared-chat participation does not grant access to another employee’s private workspace information.
Sense Market can publish market and competitor updates to a designated space. If the organization separately authorizes news collection and the required Google access, it can receive relevant human-posted news from that space. Collected records can include message content, source links, the space name, message author, and dates. Verified, nonduplicate news can be added to the Market Intelligence Library and used in analysis immediately; news Sense cannot verify waits for human approval.
Sense Customer Experience shares approved Customer Experience Partner and Discovery Partner findings with a separately configured audience.
Drive imports use the access granted for the enabled integration. Presentation exports require an approved destination folder and confirmation before creation. Files remain subject to Google Drive’s access controls, including the destination folder’s inherited permissions. Installing an app does not by itself authorize every collection or publishing feature.
Atlassian and CRM integrations
If your organization connects Atlassian, Product Inflection may access authorized Jira issues and, if enabled, Confluence content to connect product evidence, planning, and delivery work. Access is limited by the permissions and integration settings your organization grants. Where an Atlassian integration supports creating or updating records, those actions are limited to the workflows you authorize.
Your organization may grant Product Inflection read-only access to CRM or support systems for sentiment analysis and support-ticket analysis. For these purposes, Product Inflection reads the authorized records to identify customer sentiment, recurring issues, and relevant findings. This access does not authorize Product Inflection to create, edit, or delete CRM or support records.
Information retrieved from these integrations may be saved as workspace evidence and included in relevant analyses. If an analysis uses AI, relevant content may be sent to your workspace’s configured AI provider as described below. Your organization is responsible for authorizing access and selecting appropriate records and audiences. Disconnecting an integration stops future access through that connection once revocation takes effect; it does not automatically delete evidence or analyses already saved.
AI processing and customer-provided keys
Product Inflection requires your organization to provide and manage its own AI provider API keys. When you use an AI feature, relevant prompts and workspace evidence may be sent to the AI provider configured for your workspace to produce that feature’s response. Your AI provider bills usage directly to your organization under its agreement with you.
Required provider protection. Your organization must use AI provider services, agreements, and account settings that do not permit prompts, uploaded data, or generated responses to be used to train or improve generalized or nonpersonalized models.
We strongly recommend using paid API services intended for business use and verifying the provider’s current training, data-retention, and human-access policies before connecting it or submitting company information. Paid access alone does not guarantee these protections.
Google Workspace user data
We do not use Google Workspace user data to develop, improve, or train generalized or nonpersonalized AI or machine-learning models. We use that data only for the authorized user-facing features and permitted supporting purposes. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements, and the applicable Google Workspace user data and developer policy.
Sharing and service providers
Information may be available to authorized members of your workspace or a designated Chat or Drive audience according to your organization’s configuration. We use service providers for application hosting, database and file storage, authentication, delivery, and configured AI processing. Relevant information is processed by those providers to deliver their services. Publicly distributing a Sense app does not make customer Chat messages or Drive files public.
We do not sell Google user data or use it for advertising. Any transfer of Google user data is limited to purposes permitted by Google’s policies. Information may also be disclosed when legally required or to address fraud or security incidents, within applicable Google policy limits. Any transfer of Google user data in a merger, acquisition, or sale of assets requires explicit prior user consent as required by Google’s Limited Use rules.
Human access to Google user data
Our personnel may read Google user data only with your affirmative agreement to view the specific data; when necessary for security purposes such as investigating abuse; when required by applicable law; or when the information is aggregated, anonymized, and used for internal operations in accordance with Google’s Limited Use rules. Support requests do not provide blanket permission to inspect unrelated content.
Retention and deletion
We retain information as needed to provide authorized workspace functions and meet legitimate security, audit, and legal needs. Disconnecting a Google connection stops future access through that connection once revocation takes effect. Revoking a personal connection does not automatically revoke a separately authorized company app or Chat-space connection; your organization must disable that access separately. Disconnecting does not automatically erase content already imported or saved in Product Inflection, or files already created in Drive.
Contact support to request access to, correction of, or deletion of your personal information, or assistance with deleting workspace content. We may need to verify your identity and authority. Your organization controls its shared workspace records, and some requests may need its administrator’s involvement. Any applicable legal retention or backup limitations will be explained when handling a request.
Controls and security
You can use workspace controls to manage available integrations and sharing choices, and revoke Google access through your Google Account or organization’s administrator controls. We maintain technical and organizational safeguards for customer information; no Internet service can guarantee absolute security. Contact us promptly if you suspect unauthorized access.
Where processing occurs and your rights
Service providers may process information outside your state or country. We use applicable contractual and organizational safeguards where required. Depending on applicable law, you may have rights concerning access, correction, deletion, restriction, portability, or objection. Contact us to make a request.
Changes and contact
Material changes will be communicated as required by applicable law. Questions about privacy or Google data handling can be sent to:
Harris Product Advisory LLC
support@harrisproductadvisory.com