Privacy policy

David Turturean operates this application for his own personal use. It is not offered to other users. This policy covers information obtained through its Google connection and information derived from it.

What it accesses

The application requests Google account identity and email address to verify the account, plus read-only Gmail access. That permission covers the mailbox; the owner configures what is collected. Captured message data can include senders, recipients, headers, subjects, bodies, dates, labels, message and thread identifiers, and attachment metadata. Original message files and attachment contents are archived only when that separate feature is enabled.

It uses an OAuth refresh credential for continuing access without repeated sign-in. It does not request the Google account password or permission to send, modify, or delete Gmail messages.

Why it uses the information

The application keeps searchable mail context, tracks commitments and follow-ups, prepares summaries and proposed tasks, and preserves records needed to review its work and recover from failures. Background capture continues when the source is enabled. AI processing requires a separate source-processing authorization. A proposed action does not itself authorize execution.

Where information goes

Supabase stores application records and private files. Windmill Cloud runs collection and review jobs and can retain job inputs and results. Google Cloud Storage holds recovery copies. Private exports and recovery files may also be stored on the owner's computer. Credentials are kept separately in protected secret storage and the owner's password manager.

When authorized, selected mail context is sent to Anthropic's API for summaries, triage, and draft proposals. When the owner requests source context in a connected AI assistant, selected excerpts are also processed by that assistant's provider, such as OpenAI or Anthropic. Approved task details are sent to Motion only to create the requested task. These services process information under their applicable terms and account settings.

Access is limited to the owner, authorized application services, and their service providers. Connections use encrypted transport and application credentials have limited permissions. This does not mean every copy is end-to-end encrypted or immediately erased after use.

Retention, disconnection, and deletion

At the owner's request, captured mail, derived records, and recovery copies are retained as a personal archive and review history. They have no application-wide automatic expiration and remain until separately removed. Changing or deleting a message in Gmail does not automatically remove a previously captured copy.

The owner can pause collection in the private review tools and can remove the Google connection at Google Account connections. Revoking Google access prevents further authorized Gmail access; it does not delete stored information. Pausing collection also leaves retained context available. Model-processing authorization must be disabled separately to stop that processing.

There is no self-service deletion button. For access or deletion requests, contact david@acausal.inc. Deletion requires an administrative review of the application database, private files, exports, and recovery copies. Backups and provider-retained records can outlast removal from primary storage; complete or immediate erasure is not promised.

Limits on use

Google-derived information is used only for the owner's mail, review, and task features. The application does not sell it, use it for advertising or credit decisions, or train AI models on it. Sending selected context for an authorized model response does not authorize its use for general-purpose model training. The application's use and transfer of Google information follows the Google API Services User Data Policy and Google Workspace Limited Use requirements.

These public pages contain no tracking scripts, cookies set by page code, or forms. Cloudflare Pages hosts them and may keep ordinary web-access logs. Material changes in Google-data use will be disclosed and authorized before that new use begins.