Who we are
Filo is made by Jest Labs, LLC ("we", "us"). Jest Labs, LLC is responsible for the personal information Filo collects and is the party to this policy.
What we collect
Your account. Your name, work email and company, and the password you set or the Google or Microsoft account you sign in with. We keep the time and address of your sign-ins.
What you give Filo. Messages you send in chat, files you drop in (formulas, quotes, spreadsheets, photos), and the records Filo keeps for your workspace: suppliers, items, prices, products, customers, estimates and the rest.
Connected systems. When a person connects Google Workspace, Slack, Fiddle or another system, Filo reads and writes only the data needed for the features that person turned on. The next section says exactly what that means for Google.
Usage. Which model calls were made, their token counts and cost, which apps were opened and when. On the public website we count page views by path and referrer, with your IP address hashed with a daily salt, kept for 90 days, with no cookie.
Email we send. Verification codes, invitations and notifications go out through Resend. We keep delivery events (sent, delivered, bounced) so we know an email reached you.
Why we use it
We use this information to run the service for you: to sign you in, to read what you send, to work on your records, to draft what you asked for and to show you what Filo did. We use usage data to understand which parts of Filo are being used, to keep it working, and to bill for work finished. We use your email to answer you and to tell you about changes that affect your workspace. We do not sell personal information and we do not show advertising.
Google user data
Filo connects to Google Workspace only when a person in your workspace chooses to connect it, with their own Google account, one product at a time. Filo asks for these scopes:
- Gmail (gmail.modify). To draft emails to suppliers in your own Gmail, to send them only after you approve each one, and to read the replies in those threads so Filo can record the quotes. Filo reads your email with suppliers, and the quotes, price lists and orders attached to it, so it knows what you buy, what you pay and how long each supplier takes.
- Drive (drive.readonly). To open the file you point Filo at, such as a spreadsheet of prices or a formula. Filo does not scan your Drive.
- Docs. To read a document you share with Filo and to create or update documents you ask for.
- Sheets. To read and write the tabs where you keep records, with every changed cell commented and formulas left alone.
- Slides. To read a deck you share with Filo and to create or update slides you ask for.
Google data is used only to provide the features the person turned on. It is never used for advertising, never sold, never used to train generalized AI or machine learning models, and never read by a person at Filo except with that person's consent for a support request, or where needed for security or to comply with the law. You can disconnect any product from Filo's Connections page or from your Google account's permissions page, and Filo stops using that data at once.
Filo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Sub-processors
Other companies process data for us so Filo can run: our cloud host, our model providers, our email provider. The current list, what each one does and where it runs is on our sub-processors page. We tell workspace admins by email 30 days before adding one.
Model providers
Filo uses large language models to read documents, draft emails and work out costs. Your content is sent to the provider your platform admin has chosen: Anthropic, OpenAI, Google (Gemini), DeepSeek or OpenRouter. Each processes it under its API terms, which do not allow it to be used for training. We record each call's size and cost, not its content, in our usage data.
Retention
We keep your data while your workspace exists. You can delete a chat or a file at any time, and anything Filo added from a chat can be undone. When a workspace is closed, you have 30 days to export, then we delete its data from our active systems. Backups roll over within 30 days after that. Usage records needed for billing are kept as long as the law requires.
Security
Our security page says where Filo runs, how data is protected and what we do not have yet. In short: every record belongs to one account, files sit in private storage, connection tokens are encrypted with a key kept outside the database, and nothing leaves your mailbox without a person's approval.
Your rights
You can ask us for a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, or export your workspace's data. Workspace owners and admins can do much of this from Filo itself. For anything else, write to privacy@filoagent.com and we will answer within 30 days. If you are in a place with a data protection authority, you can also complain to it.
Children
Filo is a tool for businesses and is not for anyone under 16. We do not knowingly collect information from children.
International transfer
Filo runs on Google Cloud in the United States (us-central1). If you use Filo from elsewhere, your data is transferred to and processed in the United States. Where the law requires, we rely on standard contractual clauses for that transfer.
Cookies
The Filo app sets one session cookie so you stay signed in. The public website sets no cookies at all. There is no advertising or third-party analytics on either.
Changes
We may update this policy. When we do, we post the new version with its date here and email workspace admins when the change matters to them.
Contact
Privacy questions go to privacy@filoagent.com. Our postal address is Jest Labs, LLC, 333 W 2230 N, Suite 310, Provo, UT 84604.