Privacy Policy

How Integrations collects, uses, stores and shares information.

Last updated October 21, 2026

This Privacy Policy explains how Integrations ("Integrations," "we," "our," or "us") handles information when you use our website, the hosted service at integrations.devmachine.cloud, and its APIs (together, the "Services").

Integrations runs on a server we operate. We process and store the information described below so we can sign you in, manage organizations, connect your integrations and run the actions you request.

1. Information we collect

Account information

When you sign in, we store your name, email address, account ID, session identifiers and organization membership.

Configuration

We store what the Services need to work: organization names, members and roles, installed apps, tool definitions, policies, and connection settings.

Credentials and connected-service data

When you connect a third-party service, you may give us API keys, OAuth tokens or other secrets. We store them encrypted and use them only to make the requests you or your agent ask for. Content from those services passes through Integrations while it carries out a request.

Google user data

If you connect a Google account, Integrations uses only the permissions you grant to perform the actions you request. Depending on what you connect, this can include reading or changing Gmail messages and labels, Google Calendar events, Google Drive files, Docs, Sheets, Slides, Forms, Contacts, Tasks or Meet data.

We store the OAuth credentials and connection details so the integration keeps working. We process Google content only while carrying out the request you made and return the result to you or to the agent you directed. That content can appear in another service only when you explicitly direct Integrations to send it there.

We do not use Google user data for advertising, we do not sell it, and we do not use it to train generalized artificial-intelligence or machine-learning models. Humans do not read it, except with your consent, for security purposes, or when required by law.

Integrations' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can stop access at any time by deleting the Google connection in Integrations or by removing Integrations from your Google Account permissions.

Technical information

Our server records technical data such as IP address, browser information, request logs and error logs, to keep the Services secure and working.

2. How we use information

• to provide, operate, secure and support the Services;
• to sign you in and keep your session;
• to manage organizations, members and permissions;
• to connect your integrations and run the actions you request;
• to debug problems and prevent abuse; and
• to comply with the law.

3. How we share information

We share information only:

• with the third-party services you connect, when you direct Integrations to act on them;
• with the administrators and members of your organization, as your permissions allow;
• with our hosting provider, which runs the server the Services live on; and
• when required by law, or to protect rights, safety or the Services.

We do not sell personal information.

4. Cookies

We use only essential cookies, such as the session cookie that keeps you signed in.

5. Data retention and deletion

We keep information while your account is active and as long as needed to provide the Services. When you delete a connection, its stored credentials are deleted. To delete your account and all associated data, email djalma@nossomos.cc. Some data may remain in backups for a short period after deletion.

6. Security

Credentials are encrypted at rest, traffic is encrypted in transit, and access to the server is restricted. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

7. Your rights

Depending on where you live, including under the Brazilian LGPD and the GDPR, you may have the right to access, correct, delete or export your personal data, or to object to its processing. To make a request, email djalma@nossomos.cc.

8. Children

The Services are not directed to children under 13, and we do not knowingly collect their personal information.

9. Changes

We may update this policy. When we do, we will post the new version here and change the date above.

10. Contact

Questions about this policy: djalma@nossomos.cc.