1. Who is responsible
Sarmis is provided by UberPixel SRL, CUI 37625688, registered in Romania (“Sarmis”, “we”, “us”). You can contact us about privacy at contact@uberpixel.ro.
This policy applies when you visit sarmis.ai, use the Sarmis Gmail experience and dashboard, run connected routines, or contact us.
For information in a connected mailbox or workspace, the customer — an organization or a professional using Sarmis for work — decides why and how that information is used and is the data controller. UberPixel SRL acts as a processor only for the limited customer information that reaches Sarmis services, under the customer’s instructions and the applicable data-processing agreement.
UberPixel SRL is the controller only for the limited information it uses for its own account administration, billing, website enquiries, support correspondence and security records. This does not give UberPixel access to a customer’s inbox.
2. In plain language
- Sarmis works only with the accounts and permissions you connect. UberPixel cannot open or browse your inbox through Sarmis.
- Your correspondence remains with your email provider. We do not build a second mailbox archive.
- We do not sell mailbox data, use it for advertising or use it to train general AI models.
- Disconnecting stops future access immediately. If you also delete your Sarmis account, service data held by UberPixel is deleted within 30 days, except records that must be kept by law.
- Sarmis processing controlled by UberPixel stays in the European Economic Area. We do not transfer customer content outside the EEA.
3. How Sarmis connects to your work account
Sarmis connects to Gmail or another supported service only after you authorize it through that provider. We do not ask for, receive or store your mailbox password.
You choose the permissions needed for enabled features such as classifying email, applying labels, archiving, preparing a draft, using calendar context, reading an authorized file or running a scheduled routine. Sarmis can use those permissions only to provide the features you enable. They do not give UberPixel personnel access to open or browse your inbox.
You can revoke the connection from the relevant provider or Sarmis settings. Revocation stops future access to that provider account.
4. Information we process
Account and organization information
Name, business email address, company, role, profile information, authentication information and workspace membership.
Automated mailbox operations
To perform a feature you enable, the Sarmis software may use the relevant message and basic details such as who sent it, its subject, when it arrived and how it is currently organized. For example, it can classify a message, apply a label, archive it or create a draft reply inside Gmail.
A draft remains in your mailbox for you to approve, edit or delete. We do not send a copy of your inbox or draft folder to UberPixel personnel.
UberPixel access to your mailbox
UberPixel cannot open, search or browse your connected inbox through Sarmis. If you contact support, our team sees only the information you choose to submit in the support form or an attachment. Sending a support request does not give us access to your mailbox.
Other connected workspace information
Sarmis uses only the services and permissions you explicitly connect. Depending on the features you enable, this can include your email signature and basic settings, contacts, calendar information, and files or documents you authorize so Sarmis can write in your style, identify participants, understand a schedule or complete a requested routine. This does not give UberPixel personnel access to your work account.
Information about people who do not use Sarmis
Your work email may contain information about customers, suppliers, colleagues or other people who do not have a Sarmis account. Sarmis uses that information only to provide the feature requested by you or your organization. We do not use it to contact or advertise to those people.
Instructions and personalization
Prompts, sender rules, routines, schedules, approvals, edits, deletions and other choices that help Sarmis follow your working preferences, draft in your tone and recommend useful routines.
Company reporting information
For organization accounts, Sarmis processes the work metrics and waiting-thread details described in section 7. Individual accounts do not send this organization-reporting payload.
Connection, support and website information
Information needed to keep an account connected, protect access, respond to support requests, manage a subscription and operate this website.
5. Why we process information and our legal bases
- Provide the service and requested routines: the customer’s documented instructions where UberPixel acts as processor for connected mailbox and workspace information.
- Personalize drafts and recommend routines: provide the requested service and pursue the legitimate interest of making Sarmis useful, subject to the user’s controls and the organization’s instructions.
- Manage the Sarmis account and support: performance of the service contract and our legitimate interest in responding to requests and protecting the service. Support receives only what the requester submits.
- Billing, accounting and legal compliance: performance of the contract and applicable legal obligations.
- Optional marketing: consent where required, with the right to unsubscribe at any time.
The customer is responsible for establishing the appropriate legal basis for work-account information, informing affected personnel where required and configuring access consistently with applicable law.
6. AI processing
When a Sarmis feature needs AI to understand or classify a message or authorized file, or to prepare a response, only the instruction and context needed for that task are processed by our contracted AI provider in the European Economic Area.
This is automated processing. It does not allow UberPixel personnel to open your inbox. UberPixel SRL does not retain that task context as a mailbox archive. Our AI provider is contractually restricted from using it to train general models, and UberPixel SRL does not use mailbox content to train general AI models.
Sarmis is designed to send only the context needed for the requested task. AI output may be inaccurate. Important customer-facing, legal, financial or business actions should remain subject to human review and appropriate approval settings.
7. Company reporting
This section applies only to organization accounts. Sarmis uses current reporting information so coworker, team-lead and owner reports remain useful and up to date.
Reports can include message volumes, response times, work categories and limited details about conversations still waiting for a reply, such as the subject, sender and waiting time. This allows an authorized user to identify a concrete blocker rather than see only an aggregate number.
Reporting visibility follows workspace roles. A coworker sees their personal report; a team lead sees the relevant team view; an owner can see company and department views. The organization is responsible for assigning these roles, informing its personnel and ensuring that access remains appropriate.
8. Permissions used by Sarmis
Sarmis asks only for access connected to features you or your organization enable. Email access allows it to organize messages and create drafts. Calendar, contacts or file access is used only when an enabled feature needs that information.
You can review permissions during provider authorization and revoke them later. See Security & Data Access for the plain-language explanation.
10. What happens when you disconnect or delete Sarmis
If you disconnect Sarmis
Revoking the connection stops future Sarmis access to that provider account immediately. Your messages and drafts remain in Gmail, Outlook or the connected service because they belong to your account there. UberPixel has no separate mailbox archive to delete.
If you delete your Sarmis account
After a verified deletion request or termination of the account, Sarmis service data held by UberPixel — including account settings, routines and reporting records — is deleted without undue delay and no later than 30 days. For an organization workspace, the authorized customer administrator gives the deletion instruction.
Information that must be kept by law
Billing documents and records that Romanian accounting law requires us to keep are restricted to that legal purpose and retained for 5 years, calculated from 1 July of the year following the financial year in which they were created. Information needed for an active legal claim or binding legal request may be kept only for as long as that matter requires.
GDPR does not set one universal deletion period for every category of data. It requires deletion without undue delay when there is no longer a legal reason to keep the data. The 30-day period above is Sarmis’s operational commitment for account deletion; it does not extend the legal-retention exception.
11. European processing and data location
Sarmis infrastructure and contracted AI processing selected and controlled by UberPixel are located in the European Economic Area. UberPixel does not transfer customer content outside the EEA.
Your connected mailbox and files remain subject to the storage location, contract and settings you selected with your email or cloud provider. Sarmis does not change that provider relationship and does not create a second mailbox archive.
12. Security
We use technical and organizational measures designed to protect information against unauthorized access, alteration, loss or disclosure. Sarmis uses provider authorization instead of asking for mailbox passwords, separates customer workspaces and allows connected access to be revoked.
No online service can guarantee absolute security. Users must protect their credentials, enable safeguards offered by their provider and report suspected misuse promptly. More information is available on Security & Data Access.
13. Your choices and rights
Depending on applicable law and the circumstances, you may have rights to be informed, access, correct, delete, restrict or object to processing, receive a portable copy of data, withdraw consent and request human review of a decision made solely by automated means.
Sarmis is not intended to make decisions producing legal or similarly significant effects without human involvement. Organizations should not configure it for such decisions without an appropriate legal assessment and safeguards.
Send a request to contact@uberpixel.ro. We may need to verify your identity or authority. If an organization provides your account, submit workspace-content requests to that organization first; we will assist it as its processor.
We respond without undue delay and no later than one month after receiving a valid request. That response period may be extended only where GDPR allows it and with notice within the first month.
You may complain to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or your local data-protection authority.
14. Website data, contact and changes
We use only limited browser storage needed to operate this website and its interactive product previews. sarmis.ai does not currently use analytics, advertising or cross-site tracking cookies. See the Cookie Policy for the current list and your controls. If optional technologies are added later, we will provide any notice and choice required by law before using them. Sarmis is intended for business users and is not directed to children.
Questions about privacy can be sent to contact@uberpixel.ro. The service provider is UberPixel SRL, CUI 37625688, Romania. The controller/processor roles for each data category are explained in section 1.
We may update this policy as Sarmis changes. We will provide additional notice where a material change affects how we use personal data.