Privacy Policy

Last updated: 10 July 2026

This Privacy Policy explains how Peak State Global (we, us, our), operator of ZERO — the Gmail triage tool at zero.peakstate.global — handles your personal information. We are based in Australia and handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

The guiding principle is simple: ZERO is a remote control for your mailbox, not a copy of it. We hold as little of your information as the Service can run on, and we keep no store of your mail.

1. What we collect

Account information — the email address, name, and profile picture from the Google account you sign in with.
Connected-mailbox data (accessed on demand, not stored) — when you open, triage, or act on mail, ZERO fetches message metadata and content (sender, recipients, subject, body, labels, attachments) from the Google accounts you connect, and contact details where you use Contacts-based features. This is read live and cached only in your browser for the session.
Content you create in ZERO — your triage rules, Evernote aliases and their notebook names and tags, and your preferences.
Connection credentials — the OAuth refresh tokens that let ZERO reach your connected accounts, held in encrypted form (see Security).
Technical data — basic device, browser, and performance information generated when you use the Service.
Cookies — we use only the cookies needed to keep you signed in and to run the Service. We do not use advertising or cross-site tracking cookies.

2. How we collect it

We collect information directly from you (when you sign in, create a rule, or register an alias), automatically (technical and performance data), and through the connections you authorise — chiefly the Google Gmail and People (Contacts) APIs, and, for the Evernote Alias Router, inbound and outbound email. We request the narrowest access the feature needs, and read-only access wherever the provider supports it.

3. How we use it

to operate the Service — fetching, displaying, and acting on your mail on your instruction;
to run your rules and sweeps, and to create the matching native Gmail filters;
to power automated and AI features such as rule suggestion and alias-rename inference (see below);
to file mail into Evernote via the aliases you create, and to file a message as a task in Peak State Navigator when you ask;
to sync your preferences across your devices;
to provide support, secure the Service, and meet our legal obligations.

We do not sell your personal information, and we do not use it for advertising.

4. AI processing

Some features send data to a third-party AI provider to produce a result — for example, message metadata and content to suggest a triage rule, or notebook names to infer a likely alias rename. This data is sent only to generate that specific result. Our AI providers are engaged under terms that do not permit them to use your data to train their models.

5. Google user data and Limited Use

ZERO’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the triage features you use, do not transfer it except as needed to provide those features or as required by law, do not use it for advertising, and do not let humans read it except with your consent, for security or to comply with the law, or where the data is aggregated and de-identified.

6. Who we share it with

We share information only as needed to run the Service, with providers bound to use it for that purpose alone:

Cloud hosting, database, and authentication — to run the app and store your rules, aliases, and preferences.
AI processing — as described in section 4.
Email delivery and inbound parsing — to route mail through the Evernote Alias Router.
The services you connect — Google and Evernote — which you already have a relationship with, governed by their own terms.
Task filing — Peak State Navigator, when you file a message as an action.
Performance analytics — anonymous performance measurement only.

We may also disclose information where required or authorised by law, and as part of a genuine business transfer (in which case this Policy continues to apply).

7. Overseas disclosure

Some of our providers store or process information outside Australia — typically in the United States. Before disclosing your personal information to an overseas recipient, we take reasonable steps to ensure it is handled consistently with the APPs.

8. Security

We protect your information with encryption in transit, access controls, and least-privilege connection scopes. Your Gmail refresh tokens are encrypted at rest (AES-256-GCM) and never logged. Because we fetch mail on demand and keep no server-side copy, there is no stored mailbox for an attacker to take. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme.

9. Retention and deletion

We keep the information you create in ZERO — rules, aliases, and preferences — for as long as your account is active. Because we do not store your mail, there is no mail for us to retain or delete. You can disconnect an account at any time, which stops further access to it; you can ask us to delete your account and associated data by emailing us. Deletion is subject to any records we must keep by law.

Note that disconnecting or deleting does not undo what has already happened — mail already filed into Evernote, tasks already created, or Gmail actions already taken remain as they are, and are governed by those services’ own policies.

10. Accessing and correcting your information

You can ask to access or correct the personal information we hold, or request a copy of the content you have created in ZERO, by emailing contact@peakstate.global. We will respond within a reasonable time and may need to verify your identity first.

11. Complaints

If you have a privacy concern, please contact us first at contact@peakstate.global and we will try to resolve it. If you are not satisfied, you can escalate to the OAIC at oaic.gov.au or on 1300 363 992.

12. Children

ZERO is invite-only and intended for people aged 16 and over. We do not knowingly collect personal information from children under 16.

13. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date above shows when it last changed; material changes take effect when posted.

14. Contact

Questions about privacy or this Policy: contact@peakstate.global.