Privacy Policy

Last updated 8 August 2026

Handled is operated by Digital Samadhi LLC ("we", "us"). This policy explains what Handled does with your data, particularly the contents of the Google accounts you choose to connect.

What Handled accesses

Handled only reads a Google account after you explicitly connect it, and only the accounts you connect. For each one it accesses:

• Message content and metadata — sender, recipients, subject, date, body text and thread identifiers, for messages matching the sync window (by default, inbox mail from the last 60 days).
• Your email address, to label the connected mailbox.

Handled does not access Drive, Calendar, Contacts, or any Google service other than Gmail.

Why

• Routing. The sender address is matched against the projects you have created, so mail is filed under the right client.
• Task extraction. Message text is analysed to identify concrete requests, which are presented to you for approval. Nothing becomes a task until you accept it.
• Replies. When you choose to reply, Handled composes a draft and — only if you press send — sends it from the connected account.
• Moving mail to Bin. If you delete a message in Handled, it is moved to the Bin in Gmail. Handled never permanently deletes mail.

Google API Services — Limited Use

Handled's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: we do not sell Google user data; we do not use it for advertising; we do not allow humans to read it except with your explicit consent, to resolve a support issue you have raised, for security purposes, or where required by law; and we do not use it to train generalised artificial intelligence or machine learning models.

Automated processing

To identify tasks, message text is sent to Anthropic's API. Anthropic processes it to return that result and, under its commercial terms, does not use API inputs to train its models. This processing happens per message, on your behalf, to produce output only you see.

This website

The marketing site counts page views through Cloudflare Web Analytics. It sets no cookies, reads nothing already stored on your device, and creates no identifier that would follow you to another site — so there is nothing here to consent to and no banner asking you to. The application itself stores your sign-in session on your own device, which is what keeps you signed in; it is not used to track you.

Where your data is held

Access tokens for your Google accounts are stored encrypted and are not readable by the application front end under any circumstances.

Who can see your data

Only you. Every record in Handled is bound to your account and isolated at the database level, not by application code. We do not read your mail; the exceptions are the narrow ones listed under Limited Use above.

Keeping and deleting

• Disconnect a mailbox and its synced mail and stored token are deleted from Handled.
• Delete your account and everything belonging to it — projects, tasks, mail, tokens — is deleted within 30 days.
• Nothing you delete in Handled is ever deleted from Gmail; the strongest action Handled can take on your mailbox is moving a message to the Bin.

To delete your account, email hi@taskshandled.com. You may also revoke Handled's access at any time from your Google account permissions page.

Your rights

You can ask what we hold about you, ask for a copy, ask for it to be corrected, or ask for it to be deleted. Write to the address below and we will respond within 30 days.

Children

Handled is a business tool and is not directed at anyone under 18.

Changes

If this policy changes materially we will email the address on your account before the change takes effect.

Contact

The data controller for the purposes of this policy is:

Other ways to reach us are on the contact page. The companies that process data on our behalf are listed on the subprocessors page.