1. What this application is
This application is a private, single-user automation assistant operated by Polysoft Studios and used exclusively by the account owner on their own Google Account. It is not offered to the public, it has no sign-up or public user base, and it does not process the Google user data of any other person. Its purpose is to automate the operator’s own business and personal workflows: email triage, document and file management, scheduling, backup, and reporting on the operator’s own applications.
2. Google user data the application accesses
The application requests only the scopes required for the workflows above, and only for the operator’s own account:
- Gmail (read, send, modify) — to read, classify, label, summarise and send email on the operator’s behalf.
- Google Drive — to store, back up and organise the operator’s business files.
- Google Docs and Sheets — to read and update the operator’s own documents and reports.
- Google Calendar — to read and create the operator’s own events.
- Contacts (read-only) — to resolve sender identities when triaging email.
- Google Fit / Health Connect (activity, body, heart rate, sleep, nutrition — read-only) — to record the operator’s own fitness and health metrics.
- AdMob (read-only, reporting) — to read the operator’s own ad revenue figures.
- Firebase, Datastore, Cloud Platform (read-only) — to inspect the operator’s own project configuration.
- Google Play Android Publisher — to publish releases and read statistics for the operator’s own published apps.
3. How the data is used
Solely to perform the automation the operator has configured for themselves. Examples: generating a daily email digest, filing attachments into Drive folders, uploading reports to the operator’s own Drive, logging fitness readings, and compiling revenue reports for the operator’s own apps. The data is never used for advertising, profiling, credit assessment, or automated decision-making about any other person, and it is never used to build an advertising profile.
4. Storage and security
OAuth credentials and derived data are stored on a private, access-controlled server owned and operated by the operator. Credentials are stored encrypted at rest, transmitted only over TLS, and accessible only to the operator. No third-party hosting of Google user data is used beyond the Google APIs themselves.
5. Sharing and disclosure
Google user data is never sold, rented, traded or transferred to any third party. It is not used for advertising and is not shared with data brokers. Disclosure occurs only where required by law, or where strictly necessary to provide the functionality described above (for example, the Google APIs the operator has authorised).
6. Limited Use
The application’s use of Google user data is limited to the practices disclosed in this policy and complies with the Google API Services User Data Policy, including the Limited Use requirements.
7. Retention
Data is retained only as long as needed for the purpose for which it was collected. Email-derived summaries are retained for a maximum of 90 days. Backups are retained according to the operator’s backup rotation. Revenue and fitness records are retained as historical business records.
8. Access, deletion and revocation
The operator may revoke the application’s access at any time at myaccount.google.com/permissions. On revocation, stored OAuth tokens are deleted within 24 hours and any derived data is deleted within 30 days. Requests concerning Google user data can be sent to stephenoneillmail@gmail.com and are actioned within 30 days.
9. Children
This application is not directed to children under 13 and does not knowingly collect data relating to them.
10. Changes
Any change to this policy will be published on this page with a revised effective date.