Privacy | Pending - Turn Emails Into Tasks Automatically

Pending helps you keep track of responsibilities in your communications. This policy explains what information we collect, how we use it, and the choices you have.

Pending operates from Ontario, Canada.

Information We Collect

When you use Pending, we may collect:

Account information such as your name and email address
Communications you connect, forward, or submit through supported sources, including Gmail, Outlook/Microsoft 365, iCloud Mail, Slack, email forwarding, and authenticated ingestion where available
Communication content and related information such as message bodies, subjects, senders and recipients, timestamps, conversation identifiers, and other relevant metadata
Responsibilities, summaries, dates, ownership assessments, status changes, history, and other information generated from those communications
Settings and preferences you choose inside the app
Product usage, feedback, support, plan, subscription, and limited billing information needed to operate the service

Communications you submit or connect may contain personal information about other people. We process that information as needed to provide Pending to the account holder.

Google User Data

If you connect Gmail, Pending requests Google’s gmail.readonly permission. This allows Pending to read the Gmail data you authorize, including messages, threads, headers, metadata, and message content.

Pending uses Google user data to identify and maintain your responsibilities, understand relevant changes in conversations, and provide related user-facing features.

Pending’s Gmail access is read-only. Pending does not use this access to send, edit, delete, archive, or otherwise modify messages in your Gmail account.

Gmail content is generally processed temporarily and removed after processing is completed, except for limited Possible Responsibility excerpts retained as described under Data Retention below. Google user data may also be processed by service providers acting on Pending’s behalf where necessary to provide or improve Pending’s user-facing functionality, operate the service securely, or comply with law.

Pending does not sell Google user data or use it for advertising. Pending does not use, retain, or transfer Google user data, including communication content and information derived from it, to develop, train, or improve generalized or non-personalized AI or machine-learning models. These restrictions also apply to service providers processing that data on Pending’s behalf.

Pending’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

These Google-specific restrictions apply throughout this policy, including to AI processing, service providers, retained data, backups, and logs. Transfers to service providers for Pending’s user-facing features occur only with your consent. Human access to Google user data is limited to the exceptions permitted by Google’s Limited Use requirements; ordinary support access to specific communications requires your affirmative agreement.

How We Use Your Information

We use your information to:

Identify responsibilities in your communications
Maintain those responsibilities as the underlying conversations evolve
Understand when later communications change, complete, cancel, delegate, or otherwise affect existing responsibilities
Provide AI-powered responsibility extraction, summaries, and related features
Improve the reliability and operation of Pending and its user-facing features
Provide customer support
Operate accounts, plan limits, subscriptions, security, and fraud prevention

We do not sell your personal information or communication content.

We do not use communication content for advertising.

We do not use your communications to train our own AI models.

AI Processing

Pending uses artificial intelligence to understand communications and identify and maintain responsibilities. Depending on the feature, AI processing may include communication content, relevant conversation context, existing responsibility information, dates and metadata, and questions or instructions you submit.

Pending currently accesses AI functionality through Base44’s infrastructure, which may use underlying AI or model providers to process information on Pending’s behalf.

Pending does not train its own AI models using your communication content. Service providers may process information as necessary to provide their services to Pending under their arrangements with Pending and applicable law.

Third-Party Services

Pending relies on third-party providers for services such as application infrastructure, authentication, communication integrations, email processing, payments, security, and AI processing.

These providers may process personal information, communication content, or derived information where necessary to provide their services to Pending.

Pending remains responsible for its handling of personal information as required by applicable law.

Pending does not disclose communication content to advertisers.

Your Controls

You can:

Delete responsibilities
Clear completed responsibilities
Exclude specific senders or domains
Disconnect supported communication sources
Disable or regenerate forwarding access and revoke API keys where applicable
Delete your account

Disconnecting a source stops Pending from accessing new communications through that connection. It does not automatically delete responsibilities, history, or communication context already received by Pending.

Data Retention

Pending temporarily processes communication content to identify and maintain responsibilities. Original message content is removed after processing is completed, except for temporary Possible Responsibility excerpts described below. Content may be retained while processing is pending or requires a retry.

Pending retains derived responsibility information and limited communication metadata needed to maintain responsibilities, their history, and the operation of the service.

Some email context retained under earlier versions of Pending may remain temporarily while existing retention and cleanup processes remove it.

Possible Responsibilities. When Pending is unsure whether a communication assigns you a responsibility, it may temporarily retain an excerpt of the original message to help you confirm or dismiss the Possible Responsibility. The excerpt contains up to 2,000 characters of the sender’s own message, excluding attachments and quoted conversation history. It is deleted when you confirm or dismiss the Possible Responsibility, or after 14 days if you have not reviewed it. Expiry of an excerpt does not change the Possible Responsibility itself. This temporary retention is an exception to Pending’s general practice of removing original message content after processing.

Other account, subscription, security, support, and operational information is retained only for as long as reasonably necessary for the purposes described in this policy or as required or permitted by law.

Account Deletion

You may delete your Pending account at any time.

When you delete your account, Pending removes the application data and stored access credentials associated with your account that are covered by the deletion process and disables Pending’s ongoing access through those connections.

For iCloud Mail, Pending can delete its stored copy of your Apple app-specific password but cannot revoke that password at Apple. You can separately revoke it through your Apple account.

Some information may remain where required or permitted for billing, accounting, fraud prevention, security, legal compliance, or infrastructure operations. Information may also remain temporarily in protected backups or operational logs until applicable retention periods expire, and third-party providers may retain limited records in accordance with their applicable obligations and retention practices.

Privacy Rights

Depending on where you live, you may have rights relating to your personal information, including rights to request access, correction, deletion, or a copy of certain information, and in some jurisdictions rights to object to or restrict certain processing.

Where we rely on your consent for a particular use of information, you may withdraw that consent subject to applicable legal or contractual restrictions.

We may need to verify your identity before completing a privacy request.

If you have a question, request, or complaint about Pending’s privacy practices, contact the Privacy Lead using the address below. You may also have the right to complain to the privacy or data-protection authority that applies where you live.

International Processing

Pending and its service providers may process information in countries other than the country where you live.

Privacy and data-protection laws may differ between jurisdictions, and information processed in another country may be subject to lawful access by courts, law-enforcement agencies, or other authorities in that jurisdiction.

Where applicable law requires particular safeguards for international processing or transfers, Pending will use appropriate measures required by that law.

Security

We take reasonable steps to protect your information. However, no internet service can guarantee absolute security.

Contact