This Privacy Policy explains how TBD Growth OS accesses, uses, stores, and shares information when an authorized user uses the application or connects a Google account.
Information we process
Depending on the features the user enables, TBD Growth OS may process:
- account and authentication information, such as an email address and account identifiers;
- Google account identity information needed to identify the connected account;
- Gmail message content and metadata made available through authorized read-only Gmail access;
- Google Calendar event information made available through authorized read-only Calendar access;
- Gmail draft content when the user uses a feature that prepares a draft;
- OAuth connection metadata and credentials needed to maintain an authorized Google connection.
How Google user data is used
Google user data is used only to provide or support features the authorized user requests. This may include surfacing relevant information from Gmail, reading calendar events for workflow context, and creating Gmail drafts for the user to review.
TBD Growth OS does not use its Gmail integration to send messages, schedule-send messages, reply to messages, or forward messages on the user's behalf. Gmail drafts remain subject to user review and manual sending. The Calendar integration is read-only and does not create, modify, or delete Google Calendar events.
OAuth credentials and storage
OAuth access tokens may be handled as needed to perform authorized Google API requests. OAuth refresh tokens and connection metadata may be retained while a Google connection is active so the application can maintain that connection without repeatedly asking the user to authorize it.
OAuth credentials are treated as secrets and are not intentionally placed in public pages, ordinary user-facing fields, screenshots, or source-control records.
Sharing and disclosure
We do not sell Google user data, use it for targeted advertising, or disclose it for unrelated commercial purposes. Information may be processed by service providers that host, secure, or operate the application when necessary to provide the service, or disclosed when required by law.
Retention and deletion
We retain connection information and other data only as long as reasonably necessary to provide the enabled features, maintain security and audit records, or meet applicable legal obligations. A user can revoke Google's authorization through their Google Account. Revocation stops future authorized access.
To request deletion of retained account or Google integration data associated with TBD Growth OS, contact admin@tbdops.com.
Security
We use technical and organizational safeguards intended to limit access to authorized users and protect credentials and application data. No method of storage or transmission can be guaranteed to be completely secure.
User control
Connecting a Google account is voluntary. The user decides whether to authorize the requested Google permissions and may revoke that authorization through Google. The application is designed so external communication authority remains with the user.
Google API Services User Data Policy
TBD Growth OS's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.
Changes to this policy
We may update this Privacy Policy when application functionality or data practices change. The effective date above will be updated when material changes are published.
Contact
Privacy questions and data-deletion requests may be sent to admin@tbdops.com.