Privacy Policy

Last updated: 19 September 2026

Who we are

Telepathy Ltd is a software development company based in Auckland, New Zealand. This policy covers two things: the telepathy.co.nz website, and the internal software Telepathy runs against its own Google Workspace account.

This website

telepathy.co.nz is a static site. It does not set tracking cookies, run advertising, or build profiles of visitors.

If you submit the contact form, the name, email address and message you enter are delivered to us by Formspree, a third-party form delivery service, and then held in our email. We use that information only to reply to you. We do not sell it or pass it on to anyone else.

Our internal Google Workspace integration

Telepathy operates a private tool that connects to Google Gmail. It is an internal, single-user tool. There are no sign-ups and no external users: the only Google account it ever connects to is the account of Telepathy's own director. If you are reading this because you saw it linked from a Google consent screen, that consent screen belongs to that internal tool.

What it accesses

The tool requests these Google API scopes:

  • gmail.modify to read messages and change labels and read state
  • gmail.compose to create draft replies
  • gmail.settings.basic to read basic mailbox settings

Drafts are never sent automatically. They are reviewed by a person before anything leaves the mailbox.

Where the data goes

Mail is processed on hardware owned by Telepathy and stored locally, in a local database and in a private knowledge store held in Telepathy's own cloud account. It is not sold, not shared for advertising, and not used to train any model.

Message content is sent to Anthropic's API so that a language model can classify messages and draft replies. This is the one point at which mail content leaves Telepathy's own machines, and we would rather state it plainly than bury it. Anthropic processes that content as a service provider and does not use commercial API traffic to train its models.

No other third party receives mail content. Data obtained through Google APIs is used and transferred in accordance with the Google API Services User Data Policy, including its Limited Use requirements.

Retention and deletion

Locally stored mail data is kept only as long as it is useful and can be deleted at any time. Access can be revoked at any time from the Google Account permissions page, which stops all further access immediately.

Client work

Where Telepathy builds or operates systems for clients, the client owns that data and their own agreements and privacy policies govern it. This policy does not cover it.

Contact

Questions about privacy, or a request to have information deleted, can go to contact@telepathy.co.nz .