Connected knowledge for your company
NuSphere brings your company’s mail, calendars, files and meeting notes together, so your people and the AI assistants working for them can understand the business and get work done.
NuSphere is for approved companies, by invitation. A company joins when it is invited, and its people join when their company invites them. There is no public sign-up.
How NuSphere treats what you connect
Private by default
What you connect starts private to you. Being an owner or admin at your company doesn’t, by itself, let someone open it. Connecting a source or joining a team shares nothing automatically.
Shared only on purpose
You share items by adding them to a Space, yourself or through rules you choose for that Space, under your current sharing agreement. Its people can open those shared items. You can keep items, folders, sources or correspondents private and withdraw sharing; the former automatic team-sharing and company Gmail sharing rules are retired.
Defined warehouse data
Where warehouse extractions are available, making a Space available as a source copies nothing. An assigned developer chooses items and fields they can read. INHERIT follows each viewer’s source access. An explicit PUBLISH choice shares the validated selection with a company data role, such as Sales, which may include people or applications outside the source audience. This applies to governed shared data from every provider; private and unshared originals stay out.
AI assistants work for you
NuSphere’s assistants act on requests. An assistant acting for you can search what NuSphere collected privately for you only after you accept “AI assistants acting for you”, and you can withdraw that. What an assistant reads goes to the AI model behind it. NuSphere’s Library assistant, where BPN has turned it on for your company, uses Anthropic’s Claude models through Google Cloud’s Vertex AI; NuSphere sends them what you ask and the items it looks up to answer you, never to train a model. An assistant you connect at mcp.nusphere.app receives what it looks up for you under its own provider’s terms.
Optional text recognition (OCR) can read scanned files from connected sources in the background using a configured Google Cloud Document AI processor. It is off by default. It requires your company’s OCR switch and your acceptance of the current agreement containing the OCR disclosure with at least one purpose: “AI assistants acting for you” or “sharing into Spaces”. Recognized text can be wrong and keeps the source item’s permissions.
Acting is a separate permission
Letting an assistant act in your Gmail, Calendar or Drive needs its own Google permission, which only you can give, except Gmail access your company’s Google administrator grants (below). Once that permission is in place, an assistant you connect can read your mail and save drafts, or read events on calendars you own and check free or busy times, whether or not you accepted “AI assistants acting for you”. Sending mail, changing your mailbox, every Drive action, and creating, changing or cancelling events start off, and only you can turn them on.
What NuSphere asks Google for, and why
You can sign in to NuSphere with Google. Your company may ask you to connect Gmail, Google Calendar or Google Drive, but each one you connect is your own choice on Google’s screen, and letting an assistant act in them is separate and optional. Here, in plain words, is every Google permission NuSphere asks for on a Google consent screen, and the Gmail access a company’s Google administrator can grant instead.
Signing in
Used when you sign in with Google, and to confirm that each Google account you connect is your own.
openid- Confirms it’s you, through your Google account.
email- Your email address, to match you to your company’s invitation and to check that a Google account you connect is the one you signed in with.
profile- Your name, to show who is signed in.
Reading what you connect
Read-only. Asked only when you press Connect for Gmail, Google Calendar or Google Drive, each on its own Google screen. What NuSphere collects starts private to you. You share into Spaces under the choices described above; being an owner or admin at your company doesn’t, by itself, let someone open your private items.
gmail.readonly- Reads the messages and attachments in your own mailbox, except Spam and Trash, so you can search them. It can’t send, delete, archive or label mail.
drive.readonly- Reads files and Google Docs, Sheets and Slides in the drives you pick, so you can search them. Google’s screen covers all of your Drive; NuSphere collects only the drives you pick. It can’t edit, move, delete or reshare files.
calendar.events.readonly- Reads events from the calendars you pick: times, attendees, locations and descriptions. It can’t create, change or cancel events.
calendar.calendarlist.readonly- Lists your calendars, so you can pick the ones NuSphere collects.
Gmail actions
Optional and separate. Asked only if you authorize Gmail actions for your own mailbox. Once you do, an assistant acting for you can search and read your mail, and save its attachments to NuSphere, with no switch. Your own switches in NuSphere decide the rest.
gmail.modify- Lets an assistant acting for you search and read your mail, including Spam and Trash, save attachments to NuSphere, and save drafts. Drafting is on once you authorize, and you can turn it off. If you turn them on, it can also send mail and organize it: existing labels, read or unread, stars, archive, spam, and moving mail to Trash and back. Sending and mailbox changes start off. Sending, bulk changes and moves to Trash wait for your review unless you turn that off. NuSphere never permanently deletes mail.
Drive actions
Optional and separate. Asked only if you authorize Drive actions. The grant alone lets an assistant do nothing: looking at your files and every action start off, and you review every sharing change before it happens.
drive- Lets an assistant acting for you, for the switches you turn on, find and read files and Sheet cells; create, copy, replace, rename and move files; update cells in Sheets; move files to Trash and restore them; and share or unshare a file with one person or group. NuSphere never permanently deletes a file, shares one with anyone who has the link, or transfers its ownership.
Calendar actions
Optional and separate. Asked only if you authorize Calendar actions. Once you do, an assistant acting for you can list your calendars, read events on calendars you own and check free or busy times, with no switch. Creating, changing and cancelling events, and emailing guests, each start off.
calendar.events.owned- Lets an assistant acting for you read events on calendars you own, up to 31 days at a time, and, for the switches you turn on, create, change or cancel them. Each change waits for your review unless you turn that off.
calendar.calendarlist.readonly- Lists your calendars, so an assistant can pick the right one.
calendar.events.freebusy- Checks when you, and people you might invite, are free or busy, as far as Google shares it, to help find a time.
Gmail access your company’s Google administrator grants
Not asked on a Google screen. A company that uses Google Workspace can instead authorize NuSphere for its domain in the Google Admin console. NuSphere uses that only for the people BPN enrolls for that company, and they see no Google consent screen. Removing NuSphere from your Google Account doesn’t end it; only the company’s Google administrator can.
gmail.readonly- Collects an enrolled person’s mail as “Reading what you connect” describes, and it is private to them in the same way. Where delegated Gmail actions are set up, it also lets an assistant acting for that person search and read the mailbox.
gmail.compose- Where delegated Gmail actions are set up, lets an assistant acting for that person save drafts and send mail, under that person’s own switches and reviews.
gmail.modify- Where delegated Gmail actions are set up and the company allows mailbox changes, lets an assistant acting for that person make the Gmail actions changes above, under that person’s own switches and reviews.
What NuSphere never does with Google data
- Sell it, or use it for advertising.
- Use it, including data from Google Workspace APIs, to develop, improve or train generalized or non-personalized AI or machine-learning models. NuSphere doesn’t train AI models on it at all.
- Let anyone at BPN read it, unless you first agree that we may view specific items, it’s necessary for security or to comply with the law, or it’s aggregated and anonymized for internal operations.
NuSphere’s use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect a source in NuSphere at any time, or remove the access you granted NuSphere in your Google Account; access your company’s Google administrator granted can be removed only by that administrator. Disconnecting stops collection and hides the source’s data; original files need a separate deletion process. When a member leaves, shared Space items can stay under the applicable sharing agreement, while private captures are hidden and held for 90 days before cleanup eligibility, unless legally held. That hold does not certify that original files or backups have been physically erased. See the Privacy Policy for the retention rules or ask support@bpnsolutions.com.