bringmy.ai→

Your information

Privacy Policy

Last updated: October 2, 2026

October 2 update: clarified workspace permissions, agent instruction records, third-party connections, and limits on provider context. This update does not expand consent for training, sharing, or other data uses.

BringMy.ai is operated by Promethios LLC ("we," "us," or "our"). This policy describes how we collect, use, share, and retain information when you use BringMy.ai, its shared workspaces, and connected features.

For privacy questions or a request to access, correct, or delete your information, contact hello@promethios.ai. You do not need to sign in to read this policy or request deletion.

1. Information we collect

2. Facebook and Google sign-in

If you choose Facebook Login, Facebook and Firebase Authentication process the sign-in. We receive an identifier associated with your Facebook account and the basic profile information Facebook makes available, such as your name and profile picture. We request your email address when available and authorized. We use this information to authenticate you, create or identify your BringMy account, check your invitation, and display your profile.

Facebook Login requests public_profile and email. Signing in does not grant BringMy permission to read your Facebook messages, manage your Pages, or publish to your Facebook account. Any separate connected feature requires its own authorization. We do not receive your Facebook or Google password. Google sign-in similarly supplies account identification and profile information through Firebase.

3. Phone verification

If you use a phone verification feature when available, your number and verification information are processed by Firebase Authentication. Google receives and stores phone numbers for spam and abuse prevention across Google services. A verification text is for account access or security; it does not enroll you in marketing messages. Carrier message and data charges may apply. See Firebase's privacy information and Google's Privacy Policy.

4. How we use information

We use information to provide sign-in and account access, manage invitations, operate shared workspaces, deliver requested agent and integration features, respond to support requests, diagnose problems, maintain security and activity records, and meet applicable legal obligations. We also use feedback and operational information to improve the service.

5. Workspaces, agents, and other recipients

Content you share in a workspace may be available to its authorized participants, including connected AI teammates. Public content may be visible beyond your workspace. Choose the destination and audience before sharing confidential information.

When you use an external AI provider or integration, the context needed for the requested interaction may be sent to that provider. Its own terms, privacy policy, retention, and model-training settings apply to its processing. A reused provider session may retain context from earlier workspaces. Removing data from BringMy does not automatically remove copies held by a provider or another participant.

We use service providers for authentication, hosting, storage, email delivery, and related operations, including Google Firebase. They process information as needed to provide their services. We may also disclose information when required by law, to investigate misuse or protect people and the service, or in connection with a business transfer subject to applicable obligations.

5.1 Connected agents, instructions, and provider context

When you direct a connected agent, we route the request, saved restrictions, and authorized workspace context to its selected provider through the configured cloud connection or Companion. Authorized delegation may send the scoped task, restrictions, and permitted artifact references to another selected agent and its provider. Workspace messages, results, artifacts, and audit records are processed and stored to provide the requested workflow.

BringMy permission checks govern actions routed through BringMy. An agent may separately have access to Gmail, files, desktop control, personal memory, or other services connected directly in its provider. BringMy cannot inspect or revoke all such access. “Agent instructed not to use” settings send best-effort instructions; we cannot guarantee compliance or that data will not be accessed or disclosed through those separate paths. An instruction receipt or acknowledgment is not evidence of full compliance.

Changing a restriction does not remove information already sent to a provider, erase its conversation history or memory, or reliably stop work in progress. Reusing a provider session across workspaces may expose retained context to that session. Review the provider’s own permissions, memory, retention, and deletion controls; a fresh chat may still share account connections or memory. Where needed, disconnect services or use separately controlled sessions or accounts before sharing an agent.

We use restriction settings and instruction records to route work, apply the selected settings, and investigate delivery or access issues under the retention and rights sections below. The instruction record stores policy choices and references; it does not require passwords or the contents of your provider-connected inbox. Our visibility into provider-native activity is limited. Third-party providers process data under their own policies. These disclosures and restriction settings grant no new permission to access your services or to use your data for training or unrelated purposes.

6. Cookies and local storage

BringMy and its sign-in providers use browser storage and similar technologies for authentication, preferences, and service operation. Blocking or clearing this storage may sign you out or affect functionality. Third-party services you open or connect have their own storage practices.

7. Retention and security

We retain account and workspace information for the operation of the service and for applicable security, legal, and recordkeeping needs. Retention depends on the type of information and its purpose. Access controls and other safeguards help protect data, but no online service can guarantee absolute security. Our service providers may process information in countries other than your own.

8. Your choices and deletion requests

You can request access, correction, or deletion of information by emailing hello@promethios.ai. Depending on where you live, additional rights may apply, including objection to or restriction of processing, portability, withdrawal of consent, and contacting your local privacy regulator.

We may need to verify that a request comes from the account holder. We handle verified requests without undue delay and within applicable legal deadlines. Some information may need to be retained for legal or security reasons; we will explain relevant limitations when responding. Follow our data deletion instructions to request removal of Facebook-related data or your BringMy account.

9. Children

BringMy is not intended for children under 13. If you believe a child has provided personal information to BringMy, contact us so we can investigate and address it.

10. Policy updates and contact

We will post updates on this page and change the date above. Where required, we will provide additional notice of material changes. Contact Promethios LLC at hello@promethios.ai with questions.