Privacy Policy

Last updated: 24 October 2026

BiRoot FDE is the forward-deployed engineering service of BiRoot AI ("BiRoot", "we", "us"). This policy explains what information BiRoot FDE receives when you sign in with Google, how we use and share it, and how you can have it deleted. The BiRoot AI product and the biroot.ai website are covered by the BiRoot AI Privacy Policy.

Information we receive from Google

When you choose Sign in with Google to access a BiRoot FDE tool, we request only the openid, email, and profile scopes. Google shares with us:

• your email address;
• your name and profile picture;
• a Google account identifier used to recognize you on later sign-ins.

We do not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google service, and we never receive your Google password.

How we use it

• To authenticate you and check whether your account is allowed to open the requested BiRoot FDE tool.
• To keep a security record of sign-in attempts (email address, time, IP address, and whether access was granted).

We do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve, or train AI or machine-learning models.

How we share it

Sign-in is handled by Cloudflare Access, which acts as our authentication service provider and processes the information above on our behalf. We do not share Google user data with any other third party, except where required by law or to protect the security of our services.

Retention and deletion

• A sign-in session lasts up to 24 hours, after which you are asked to sign in again.
• Sign-in records are kept in our Cloudflare Access audit log for security purposes for a limited period under Cloudflare's log retention policy. We do not keep separate copies.
• You can revoke BiRoot FDE's access at any time from your Google Account at myaccount.google.com/permissions.
• To ask us to delete information we hold about you, email hello@biroot.com. We process verified requests within 30 days unless a longer period is required by law.

Google API Services User Data Policy

BiRoot FDE's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Responsible AI use

BiRoot FDE does not use Google APIs or Google user data to create, edit, distribute, or train models for AI-generated non-consensual intimate imagery (NCII), or for any sexual or intimate depiction of a real person. Such use of any BiRoot tool is prohibited by our Terms of Service.

Security

Sign-in uses OAuth 2.0 and OpenID Connect over TLS. Access to BiRoot FDE tools is restricted by per-tool access policies. No method of transmission or storage is perfectly secure.

Changes and contact

We will update the date above when this policy changes materially. Questions about this policy or about Google user data can be sent to hello@biroot.com.