why does streak require permissions to access my google account?
streak is an upper layer to your gmail experience and provides additional productivity features across google’s suite of products.
To do this, we ask for your permission to connect to your google account and authenticate that connection through google apps oauth. So your streak account has the same industry leading login security as your google account.
streak requests access to the following google api so that our functions can work. streak does not make any changes to your gmail, drive, contacts or calendar without your explicit permission.
- gmail (documentation): streak’s main interface is in gmail and it needs these fundamental permissions to allow you to open, click, reply, follow up, send later, mail merge and split email threads.
- google drive (documentation): Streak allows you to attach files from google drive to streak boxes.
- Contacts (documentation): Streak allows you to share data between members of your streak team. streak also enhances your gmail search experience with this information from your google contacts.
- calendar (documentation): The streak creates for you calendar events associated with streak tasks that you create or are assigned to.
what information does the streak collect?
streak never sells or trades personal information about anyone who uses our services.
streak collects only the information necessary to provide you with a functional gmail productivity experience. for more information on this, please see our privacy policy.
streak only retains data as long as it provides value to our users. (for example, we don’t store calendar data for any tasks except those created by the streak pipeline, and we delete tasks when a user asks us to). stripe quickly removes data once it is no longer referenced in the product, to the extent technically feasible. (for example, after we delete something in our main data store, there might still be an encrypted copy in a google backup). streak stores only the amount of data necessary for critical debugging and analytical needs.
where is my data stored?
all data from your streak is stored on the google cloud platform in the united states. Google may, at its discretion, make encrypted backup copies of data in other United States. locations for disaster recovery purposes.
google cloud platform has the same security policies, procedures and infrastructure as other popular google products like gmail and google drive.
streak stores information about your pipes and boxes on our google servers. We implement strict controls so that no one else can access your data unless you have explicitly shared it with them.
does ray store my emails?
streak does not store the content (the body) of your emails. instead they are fetched via the gmail api only on request. Stripe temporarily stores email metadata (recipients, subject line) for the sole purpose of indexing and classifying your email, before presenting and displaying that data to you.
how secure is my information?
streak takes significant precautions to protect and safeguard our users’ and members’ information. Raya has implemented physical, electronic and procedural security measures to protect the information that Raya collects and processes. this includes limiting access to employees, vendors and others; use of pseudonymization and anonymization techniques when feasible; and use of encryption techniques when transmitting information. We do not share your data with any third party analytics companies.
does google check the streak?
streak undergoes the google oauth api review process annually. In addition, each version of the streak extension undergoes a review process by the Google Chrome team, in accordance with the Google Chrome Developer Program policies. As a Google Trusted Partner, Racha received the G Suite Partner of the Year award in part due to Racha’s strong security practices.
how do I report vulnerabilities?
streak believes that working with expert security researchers from around the world is crucial to identifying weaknesses in any technology. If he believes that he has found a security problem with our product or service, we encourage him to notify us. we welcome to work with you to solve the problem promptly. visit our hacker one page to get started.
questions?
If you have further questions about access control, change control, encryption (at rest and in transit), or any other security-related questions, please email us at security@streak.com.
We take your security and privacy very seriously. Streak is used by many financial institutions, investment firms and banks around the world to store their sensitive information and we value your trust. If you’d like to read more about how Google handles data security within its cloud platform, we recommend reading their documentation on that.