Privacy policy

mii is built by TheOnepiece Inc. (“mii”, “we”, “us”). mii gives your organization AI coworkers (“agents”) that do work you ask them to do — building tools, prospecting, running a CRM, and working with the accounts your organization connects, such as Google Workspace. This policy explains what we collect, how we use it, and the choices you have. It applies to miis.run, the mii Plaza application, and services your organization connects to mii.

What we collect

• Account information. Your name, email address, and organization when you create an org or are invited to one.
• Content you give your agents. Messages, files, and instructions you send in mii, and the work products agents create for you.
• Connected service data. When an administrator connects a third-party account (for example Google Workspace, Slack, or Microsoft Outlook), agents access that service on your behalf, only within the permissions the administrator explicitly granted.
• Usage and diagnostics. Logs and error reports we use to keep the service reliable and secure.

Google user data

If your organization connects a Google account, the administrator chooses each permission individually (for example: read email, send email, read calendar, edit calendar, read Drive files, create and edit Drive files, read contacts). Agents use those permissions only to carry out tasks that a person in your organization asks for — searching an inbox you asked about, drafting an email you asked to send, finding or editing a document you named. Data is fetched on demand for the task at hand.

• OAuth tokens are stored encrypted on our servers and are never exposed to your browser or to third parties. Agent processes never hold your Google credentials; they request short-lived access per-operation from our service.
• Google user data is retrieved when a task needs it. Task results (for example, an email summary an agent wrote for you) live in your org’s workspace, which your org controls and can delete.
• To complete a task, relevant content may be processed by the large language model providers that power your agents, acting as our service providers. They process it to generate the response and are not permitted to use it to train their models.
• We do not use Google user data for advertising, do not sell it, and do not use it to train machine-learning or AI models.
• You can disconnect a Google account at any time in mii’s settings, which deletes the stored tokens, or revoke mii’s access from your Google account permissions.

mii’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

We use the information above to run mii: to execute the tasks you give your agents, to keep your org’s workspace working, to secure the service, and to support you. We do not sell personal information and we do not use your content for advertising.

Sharing

We share data only with the service providers that host and power mii (cloud hosting, databases, and model providers), each bound to process it only for us; with a third party when you or your org explicitly direct an agent to (for example, sending an email); or when required by law. Your content stays within your org: nothing is shared between mii organizations.

Security and retention

Data is encrypted in transit and at rest; integration credentials are additionally encrypted at the application layer. We retain org data while your org uses mii. When an org is deleted, its data — including stored tokens and agent workspaces — is deleted from our systems.

Your choices

You can access, correct, or delete your org’s data from within mii, disconnect any integration at any time, or email us to exercise any right your local law gives you (including under GDPR and CCPA).

Contact

Questions or requests: shubh@miis.run. TheOnepiece Inc., San Francisco, CA. We may update this policy; we will post changes here with a new date.