Ricasso

Privacy policy

Last updated 14 November 2026

Ricasso is a sales record for B2B teams. A company that uses Ricasso (our client) connects its mail, calendar and CRM, and Ricasso keeps a record of the people, companies, deals and conversations in them. This policy says what we collect, why, and what we never do. We follow the Australian Privacy Principles under the Privacy Act 1988 (Cth).

What we collect

• Sign-in details. When you sign in with Google we receive your name, email address and Google account ID. We ask only for basic profile scopes (openid, email, profile) to sign you in.
• Mail and calendar. Only when your company's Google Workspace administrator authorises Ricasso, and only for people your company adds as Ricasso users or shared mailboxes it lists. Access is read-only (Gmail read-only and Calendar read-only). We never read other mailboxes in your domain.
• CRM records. Contacts, companies, deals, notes and activity from the CRM your company connects (for example HubSpot or Salesforce).
• Meeting audio, only if your company turns on the recorder and a participant starts a recording, after the consent notice is shown.
• Usage and security logs, such as sign-ins and actions taken in Ricasso.

How we use it

To provide Ricasso to our client: building and updating the record, answering questions about accounts, drafting messages a person approves before anything is sent, and keeping the service secure. Mail from one person's private mailbox is visible only to that person; teammates see that a person or company exists, not the private mail or facts taken from it.

What we never do

• We do not sell personal information or use it for advertising.
• We do not use Google user data to train general AI models. Ricasso's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• We do not send email or change CRM records without a person's approval.

Who processes it

Clients' data is stored in Amazon Web Services in Sydney, Australia. To provide features we use service providers bound by contract, including an AI model provider through OpenRouter (prompts are not retained for training) and, if the recorder is used, a speech-to-text provider. We give them only what a feature needs.

How long we keep it

For as long as our client uses Ricasso. When a client leaves, or asks us to, we delete its data within 30 days, except where the law requires us to keep it. Disconnecting Google, or a Workspace administrator removing Ricasso's authorisation, stops all further reading immediately.

Your choices

You can ask for access to, correction of, or deletion of personal information about you. If you are a client's user, your company's Ricasso administrator can also do this. You can complain to us, and if you are not satisfied, to the Office of the Australian Information Commissioner (oaic.gov.au).

Contact

Ricasso, Melbourne, Australia. privacy@ricasso.ai