Privacy Policy
Last updated: August 11, 2026
Kontaktivo is a free Gmail Add-on developed by Reto Stuber. It helps you manage professional relationships by building a personal CRM from your email activity. This policy explains what data Kontaktivo accesses, where it is processed, and how you stay in control.
What Data Kontaktivo Accesses
Kontaktivo reads the following from your Gmail account:
- Email metadata: sender, recipient, date, subject lines
- Email content: message bodies are sent to Google's Gemini AI for summarization and follow-up detection
- Contact information: names and email addresses extracted from your conversations
- Calendar data: read-only access to detect meeting context
Kontaktivo generates relationship scores, conversation summaries (via Gemini AI), and follow-up suggestions.
Where Your Data Is Processed
| Data | Location |
|---|---|
| Contact graph, scores, summaries | A Google Sheets spreadsheet |
| Gemini API key | Google Apps Script properties; a user-supplied key is stored in that user's properties |
| Temporary AI processing | Google's Gemini API, via the Google Generative Language API |
| Optional profile enrichment | A Cloud Run service operated by the developer |
The installed version of Kontaktivo is configured by the developer. This includes the Google Sheets spreadsheet used for storage and the Gemini API key stored in the Apps Script properties. You may optionally enter your own Gemini key in Settings; it is stored in your Apps Script user properties and takes precedence. If you self-host Kontaktivo, the spreadsheet is created in your own Google Drive and you configure your own Gemini API key.
Google Gemini AI
Kontaktivo sends email content to Google's Gemini API to generate conversation summaries and detect follow-up opportunities. This means portions of your email content are processed by Google's AI services on servers outside your Google account. Google's own privacy policies and data handling practices apply to this processing. See Google's Generative AI Terms.
The installed version defaults to a Gemini API key provided by the developer and stored in the Google Apps Script properties. Users can replace it with their own key in Settings; self-hosted installations use their own key.
Optional: Public Profile Enrichment (Opt-In)
Kontaktivo includes an optional profile enrichment feature that discovers public profiles for your contacts. It is disabled by default and only runs after you explicitly enable it in Settings.
- What is sent: only the contact's email address and name, never email content, is sent over HTTPS to a Cloud Run service operated by the developer.
- What the service does: it derives possible usernames from the email/name and checks publicly available profile pages on up to ~50 sites, then scores each candidate match with a confidence value.
- What is returned: profile links and confidence scores are written back to your Google Sheet.
- Service behavior: the service is implemented as a stateless process. It does not store contact data in a database. As with any hosted service, technical request logs of the hosting provider are possible.
- Rate limiting: each contact is enriched at most once every 7 days; automatic nightly enrichment (also opt-in) processes at most 10 contacts per night.
You can disable enrichment at any time in Settings. Deleting the spreadsheet removes all stored enrichment results.
What Kontaktivo Does Not Do
- No analytics or usage tracking
- No cookies
- No advertising
- No selling or sharing of your data with third parties for advertising
Kontaktivo does not contain an analytics or tracking SDK. Google Apps Script exception logging is enabled for the add-on; execution and error logs may be accessible to the developer through the Google Cloud project.
Data Retention
Your data exists as long as you keep the Google Sheets spreadsheet. Kontaktivo does not maintain any separate copy.
How to Delete Your Data
- Delete the spreadsheet — open Google Drive, find the Kontaktivo spreadsheet, and delete it. This removes all stored contact data, scores, and summaries.
- Uninstall the add-on — go to Gmail Settings > Add-ons, or visit the Google Workspace Marketplace to remove Kontaktivo. This revokes all OAuth permissions.
- Revoke API access — visit myaccount.google.com/permissions to verify Kontaktivo no longer has access.
If your spreadsheet was provided by the developer and you cannot delete it yourself, contact the developer and ask for deletion.
OAuth Permissions Requested
| Scope | Purpose |
|---|---|
gmail.readonly | Read email metadata and content for relationship scoring |
gmail.compose | Draft follow-up emails (only when you initiate) |
gmail.labels | Read Gmail labels used during scanning |
gmail.addons.* | Run the sidebar add-on and read the currently open message |
spreadsheets | Store your contact graph and scores in Google Sheets |
calendar.readonly | Read calendar events for meeting context |
script.external_request | Call the Gemini API and (opt-in) the enrichment service |
script.scriptapp / script.locale | Manage time-driven triggers and detect your language |
userinfo.email | Identify your own address to separate sent from received mail |
The manifest also declares cloud-platform. The current implementation calls Gemini with an API key instead of this scope; it should be removed from the manifest once this is confirmed.
You grant these permissions voluntarily during installation and can revoke them at any time.
Your Rights
- You control the spreadsheet data and can access it anytime
- Right to access — open your spreadsheet anytime
- Right to deletion — delete the spreadsheet
- Right to portability — export the spreadsheet in any format Google Sheets supports
- Data minimization — only email metadata and content needed for scoring is processed
Contact
Developer: Reto Stuber
Email: webonomy@gmail.com
Location: Brooklyn, NY, USA
Changes to This Policy
Updates will be posted to the project repository. Continued use after changes constitutes acceptance. For material changes affecting data handling, a notice will be provided through the add-on or repository.