Privacy policy

1. Scope and contact

This policy covers MyDashboard’s personal Gmail and Google Calendar integration and these application-information pages. It does not describe unrelated applications elsewhere on this website. MyDashboard is operated for Michael Hinkle’s own authorized account, not as a public account-management service.

For questions, access requests, or deletion requests, contact michael0745@gmail.com. Do not send passwords or access tokens by email.

2. Information accessed

Depending on the permissions granted and the task requested, the private installation may access:

• Google account identity, including the account’s email address.
• Gmail message headers, participants, labels, message content, and attachments when needed for a requested feature.
• Calendar names and event information, such as titles, descriptions, dates, times, locations, and participants.
• Instructions, generated responses, task results, and operational information needed to perform and troubleshoot the requested work.

Google OAuth credentials authorize the private installation. They are separate from the public website and must not be placed in its source repository or published pages.

3. Purposes and user control

Information is used to provide requested email and calendar features: finding relevant information, preparing summaries or drafts, and making changes authorized by the operator. An OAuth permission is not, by itself, an instruction to send a message or change a calendar.

The operator reviews the requested scopes and remains responsible for authorizing actions and ensuring that the private installation follows this policy.

4. AI processing and other service providers

Content needed for a requested assistant feature may be sent to an AI provider configured by the operator, such as OpenAI when selected. Google continues to process API requests, and the operator’s hosting or infrastructure providers may process information needed to run the private installation.

Provider processing and retention depend on the selected service, agreement, and settings. Before sending Google-derived content, the operator must review those settings and use only providers and configurations compatible with Google’s User Data Policy and Limited Use requirements. This policy does not certify that every model or provider available in Hermes is suitable.

MyDashboard does not sell Google user data, use it for advertising, or use it to train or improve general-purpose AI models. Provider arrangements for Google-derived content must prohibit those uses. Transfers are limited to what is needed for the requested user-facing feature, security, legal obligations, or another purpose permitted by Google’s applicable policies.

MyDashboard follows the Google API Services User Data Policy, including its Limited Use requirements, and the applicable Google Workspace user data and developer policy.

5. Storage, retention, and security

The private installation may retain credentials, requested extracts, generated documents, conversation records, operational logs, and backups on the operator’s computers or servers. Data can also remain with a selected service provider according to the applicable service settings and agreement.

Retention depends on the private installation’s configuration and the operator’s needs. This website does not impose or promise an automatic deletion period. The operator is responsible for protecting access to the private installation and removing information that is no longer needed.

No system can guarantee absolute security. Secrets and private Google-account content must not be published in this website or its repository.

6. Revoking access and deleting retained information

1. Review or remove the app’s authorization in Google Account connections.
2. Remove stored credentials and unwanted records, exports, and backups from the private installation.
3. Where applicable, use the selected AI or hosting provider’s controls to remove retained data, or contact the operator for assistance.

Revoking authorization does not automatically erase previously retained information, delete the Google account, undo email already sent, or remove calendar events already created.

7. These public information pages

The MyDashboard pages add no analytics scripts, tracking cookies, account forms, or Google sign-in flow. GitHub Pages hosts the site and may process ordinary web-request information, such as IP addresses, under the GitHub privacy statement. Following an external link takes the visitor to that provider’s service.

8. Policy changes

This page will be updated when MyDashboard’s documented use changes. New uses of Google data must be disclosed, and additional consent obtained where required, before they begin.