Privacy Policy

Last updated: May 7, 2026

Humanity Media LLC ("Humanity Media," "we," "us," or "our") operates the website at https://humanitymedia.net and provides website design, development, hosting, and the Bear Email MCP tool described below (collectively, the "Services"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

If you do not agree with this Privacy Policy, please do not use the Services. For questions, contact us at [email protected].

1. Who We Are

Humanity Media LLC is a California limited liability company that builds and maintains websites and digital tools for our clients. The data controller for personal information collected through the Services is Humanity Media LLC. You can reach us at [email protected].

2. Information We Collect

2.1 Information You Give Us

When you fill out a contact form, request a quote, sign up for the newsletter, leave a comment, or become a client, we collect the information you provide — typically your name, email address, phone number, business name, billing address, and the contents of your messages.

2.2 Information Collected Automatically

When you visit the website we automatically receive your IP address, browser user-agent, referring URL, pages viewed, and timestamps. This information is collected through cookies, server logs, and the third-party services listed in Section 6.

2.3 Information from Google Accounts (Bear Email MCP)

If you connect a Google Account to Bear Email MCP, we receive the data described in Section 3 below.

3. Bear Email MCP — Google User Data Disclosure

Bear Email MCP is a private-beta tool offered to existing Humanity Media clients that helps prepare email drafts and manage calendar entries on the user's behalf. This section describes exactly what Google user data the application accesses, why, and how it is handled. It applies whenever you authorize Bear Email MCP to connect to your Google Account.

3.1 Google API Scopes We Request

  • Gmail compose / send (https://www.googleapis.com/auth/gmail.compose and/or https://www.googleapis.com/auth/gmail.send) — used to create email drafts in your Gmail account and, when you direct us to, send those drafts on your behalf.
  • Google Calendar (https://www.googleapis.com/auth/calendar) — used to read your calendar availability and to create, modify, or remove events at your direction.

We request the minimum scopes required to perform the features you have asked the tool to perform. We do not request access to your Gmail inbox contents, attachments, or message history beyond what is necessary to compose and send the drafts you request.

3.2 How We Use Google User Data

  • To draft, edit, and (with your direction) send email messages from your Gmail account.
  • To read your calendar availability so the tool can suggest meeting times.
  • To create, update, or cancel calendar events at your request.
  • To authenticate you to the Service via Google's OAuth flow.

We do not use Google user data for any purpose other than directly providing the user-facing features above.

3.3 Limited Use of Google User Data

Bear Email MCP's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We use Google user data only to provide or improve the user-facing features of Bear Email MCP.
  • We do not sell Google user data, and we do not transfer it for advertising, remarketing, or credit-worthiness purposes.
  • We do not use Google user data to train, fine-tune, or otherwise develop generalized or generative artificial-intelligence or machine-learning models.
  • We do not allow humans to read Google user data unless (a) we have your specific consent, (b) it is necessary for security purposes (e.g. to investigate abuse), (c) it is required to comply with applicable law, or (d) the data is aggregated and de-identified for internal operations.

3.4 AI Processing

To generate the text of email drafts and meeting summaries, the tool sends the relevant prompt content to a third-party large-language-model provider (such as Anthropic or OpenAI) in real time. These providers process the content transiently to return a response. Your Google user data is not retained by these providers, is not used to train their models, and is not shared with any other party. We have configured the tool to disable training and long-term retention on the AI provider's side wherever such controls exist.

3.5 Data Storage and Retention

  • OAuth refresh tokens are stored encrypted at rest on our servers (AWS) so the tool can continue to act on your behalf between sessions. They are deleted immediately when you disconnect the integration or close your account.
  • We do not maintain a copy of your Gmail messages, calendar events, or attachments outside of the active processing of a request you have made.
  • We retain a short operational log of API calls (timestamps, scope used, success/failure) for up to 30 days for security and debugging purposes. These logs do not contain message bodies or event contents.

3.6 Revoking Access

You can revoke Bear Email MCP's access to your Google Account at any time by visiting https://myaccount.google.com/permissions and removing the application, or by emailing [email protected] and asking us to disconnect and delete your tokens. Revocation takes effect immediately and we will purge stored tokens within seven (7) days.

4. How We Use Information

  • To deliver, maintain, and improve the Services.
  • To respond to your inquiries and provide client support.
  • To process payments and send invoices.
  • To send transactional and, where permitted, marketing communications. You can opt out of marketing emails at any time using the unsubscribe link.
  • To detect, prevent, and address fraud, abuse, security, or technical issues.
  • To comply with legal obligations.

5. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and measure how the website is used. You can control cookies through your browser settings. Disabling cookies may affect parts of the Services.

6. Third-Party Services

We rely on the following third-party providers to operate the Services. Each is bound by its own privacy policy:

  • Amazon Web Services (AWS) — cloud hosting and storage of the website and associated databases. Privacy policy.
  • Cloudflare — content delivery network, DDoS protection, and web application firewall. Cloudflare may process your IP address and request metadata. Privacy policy.
  • Stripe — payment processing. When you pay an invoice, your payment-card information is collected directly by Stripe; we do not store full card numbers on our servers. Privacy policy.
  • Google Analytics (GA4) — website analytics. Google Analytics uses cookies to collect information about your use of the website and reports it to us in aggregated form. Privacy policy. You can opt out via the Google Analytics opt-out browser add-on.
  • Google APIs (Gmail, Calendar) — the Bear Email MCP feature uses Google APIs as described in Section 3. Google's privacy policy.
  • Anthropic and/or OpenAI — large-language-model providers used for transient generation of email drafts and summaries inside Bear Email MCP. Content is processed in real time and is not retained or used for training. Anthropic privacy policy; OpenAI privacy policy.
  • Gravatar (Automattic) — when you leave a comment, an anonymized hash of your email address may be sent to Gravatar to fetch your avatar. Privacy policy.

7. How We Share Your Information

We do not sell your personal information. We share information only:

  • With the service providers listed in Section 6, strictly to operate the Services;
  • With your consent or at your direction;
  • To comply with a valid legal process or to protect our rights, property, or safety, or that of others;
  • In connection with a merger, acquisition, or sale of assets, in which case we will notify affected users.

8. Data Retention

We retain personal information only as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention windows are listed for Bear Email MCP in Section 3.5. You can request deletion of your information at any time by emailing [email protected].

9. Your Rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal information, or to object to certain processing. California residents have specific rights under the CCPA/CPRA, including the right to know what categories of personal information we collect and to opt out of any "sale" or "sharing" of personal information (we do not sell or share for cross-context behavioral advertising). EEA and UK residents have rights under the GDPR/UK GDPR.

To exercise any of these rights, email us at [email protected]. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with a supervisory authority.

10. Security

We use industry-standard administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (HTTPS/TLS), encryption at rest for OAuth tokens, restricted access controls, and regular security review. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

11. International Data Transfers

We are based in the United States, and our service providers may process data in the United States and other countries. Where required, we rely on appropriate transfer mechanisms (such as the EU Standard Contractual Clauses) for transfers from the EEA, UK, or Switzerland.

12. Children

The Services are not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, provide additional notice (such as an email or in-app notice). Your continued use of the Services after the change becomes effective means you accept the updated Policy.

14. Contact Us

Humanity Media LLC
Email: [email protected]
Website: https://humanitymedia.net