Privacy Policy

ericwongag.com · Last updated: 9 November 2026

This policy explains how the personal automation application registered under ericwongag.com (the “Application”) accesses and handles data from your Google Account. The Application is a private, single-user tool operated by the owner of this domain for their own use. It is not offered as a public service and has no other users.

What the Application accesses

With your explicit consent via Google’s OAuth 2.0 authorisation screen, the Application requests access to the following Google services, limited to the scopes you approve:

• Gmail — read messages, modify labels, and send email on your behalf
• Google Drive — read and write files in your Drive
• Google Docs — create and edit documents
• Google Sheets — create and edit spreadsheets
• Google Calendar — read and manage calendar events
• Google Contacts — read your contacts (read-only)

How the data is used

Data is accessed solely to perform tasks that you initiate or schedule within the Application — for example, summarising email, drafting documents, reading or writing spreadsheets, and managing calendar entries. The Application does not profile you, does not build advertising audiences, and does not use your data to train machine learning models.

Data storage and retention

OAuth access and refresh tokens are stored locally on a private server controlled by the Application owner, protected by file-level permissions and encrypted transport. Tokens are retained only while the authorisation remains active. Message content and file contents are processed transiently and are not retained in a permanent database beyond what is required to complete the requested task.

Data sharing

The Application does not sell, rent, or share your Google user data with third parties. Data is not transferred to advertisers, data brokers, or analytics providers. Where the Application sends content to a language model provider to fulfil a task you requested, only the content necessary for that task is transmitted. No Google user data is used for advertising or resale.

Google API Services User Data Policy

The Application’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Revoking access

You can revoke the Application’s access at any time, which immediately invalidates its stored tokens:

• Visit myaccount.google.com/permissions and remove the Application from the list of connected apps; or
• Change your Google Account password, which revokes refresh tokens for applications holding Gmail scopes.

After revocation the Application can no longer read or modify any of your Google data.

Security

The Application connects to Google over HTTPS. Credentials are stored in files readable only by the service account that runs the Application. Access is restricted to the Application owner.

Children

The Application is not directed at children and is not used by anyone other than its owner.

Changes to this policy

Any material change to this policy will be published on this page with an updated date.

Contact

Questions about this policy or the Application’s handling of data: eric.wong.ag@gmail.com.