Privacy Policy

Nest (operated by Crow Inc.) Effective Date: July 16, 2026

Nest is a local-first desktop application for AI agents, operated by Crow Inc., a Delaware corporation in the United States. This Privacy Policy explains what information Nest collects, how we use it, and the choices you have. It applies to the Nest desktop app and the Nest website at myturnstone.ai.

1. Information We Collect

• Account information. When you create an account, we collect your name, email address, and authentication details.
• Your local files. Nest works with files on your own computer. That content stays on your device except when you explicitly ask Nest to perform a task that requires sending it to an AI model or a connected service.
• Connected-service data. If you connect a third-party service (such as Gmail), Nest accesses data from that service only to carry out the tasks you request. See Section 3.
• Usage information. We collect limited operational logs (such as errors and feature usage) to keep the app working and improve it.

2. How We Use Your Information

We use your information to provide and operate Nest, carry out the tasks you ask the agent to perform, provide support, maintain security, and improve the product. We do not sell your personal information, and we do not use your files or connected-service data for advertising.

3. Google User Data

If you connect a Google service such as Gmail, Nest requests your permission through Google's OAuth consent screen and accesses your Google data only to perform actions you request inside Nest.

• What we access. Your basic Google profile (name, email address) and, if you grant it, read-only Gmail access under the gmail.readonly scope, which lets Nest read and search your email. Nest cannot send, change, or delete your email.
• How we access it. Google authorization is handled through our integration provider, Composio, which manages the secure OAuth connection on our behalf.
• How we use it. We use Google data solely to fulfill the specific request you make (for example, finding or summarizing an email). We do not use Gmail content to train AI models.
• How it is processed and stored. To carry out a request, relevant Google data may be transmitted through our backend and Composio's infrastructure and sent to our AI model providers (see Section 4) to generate a result. We do not retain your Gmail content beyond what is needed to complete your request.
• Sharing. We do not sell or transfer your Google user data, and we do not share it with third parties except the service providers listed in Section 5 that are necessary to operate the feature you use.

Limited Use disclosure. Nest's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. AI Processing

To perform your requests, Nest sends the relevant content to third-party AI model providers, currently Anthropic and OpenAI. These providers process the content to generate a response and do not use it to train their models under our configuration.

5. Service Providers

We share data only as needed to operate Nest, with providers including Amazon Web Services (hosting), Composio (connected-service authorization), Anthropic and OpenAI (AI processing), Supabase (authentication), and Google Sign-In. Each provider is bound to use the data only to provide services to us.

6. Data Retention

We keep account information for as long as your account is active. You can disconnect a connected service at any time, which revokes Nest's access to it, and you can request deletion of your account and associated data.

7. Your Choices and Rights

You can disconnect Gmail or any connected service from within Nest at any time, and you can revoke Nest's access directly in your Google Account permissions. Depending on where you live, you may have the right to access, correct, delete, or export your personal information. To exercise these rights, contact us at the address below.

8. Security

Data is encrypted in transit and at rest. Access to production systems is restricted to authorized personnel.

9. Children

Nest is not directed to children under 13, and we do not knowingly collect their information.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the effective date above.

11. Contact Us

Questions about this policy or your data can be sent to jai@usecrow.ai.