# Privacy Policy for theGerb Workspace Automation
**Effective Date:** October 28, 2026
**Last Updated:** October 28, 2026
theGerb Workspace Automation ("the application", "we", "us") respects your privacy. This policy outlines how our application accesses,
uses, stores, and protects Google user data.
### 1. Data Accessed
Our application requests access only to the scopes necessary to provide personal assistant functionality:
- `https://www.googleapis.com/auth/gmail.readonly`
- `https://www.googleapis.com/auth/calendar.readonly`
- `https://www.googleapis.com/auth/drive.readonly`
- `https://www.googleapis.com/auth/documents.readonly`
- `https://www.googleapis.com/auth/spreadsheets.readonly`
- `https://www.googleapis.com/auth/keep.readonly`
### 2. How Data Is Used
Data retrieved through Google APIs is used solely to respond to explicit user prompts within local developer sessions (e.g.,
retrieving calendar events, reading specific email notifications, or referencing documentation). Data is never used for advertising,
profiling, marketing, or automated decision-making.
### 3. Data Storage and Retention
- **No Remote Cloud Storage**: Google user data is processed ephemerally in-memory during active sessions.
- **Local Credentials**: Authentication tokens (OAuth refresh tokens) are stored locally in encrypted directories on the developer's
private workstations.
- **Retention**: We retain data only as long as necessary to complete the requested query in the local session.
### 4. Data Sharing and Transfer
We do not sell, rent, lease, or share Google user data with any third parties under any circumstances. No data is transferred to
external servers or commercial AI model training sets.
### 5. Google API Limited Use Disclosure
theGerb Workspace Automation's use and transfer to any other app of information received from Google APIs will adhere to the Google
API Services User Data Policy, including the Limited Use requirements.
### 6. User Control and Data Deletion
Users can revoke the application's access to their Google account at any time via Google Account Security Settings:
https://myaccount.google.com/permissions
Revoking access immediately invalidates all stored OAuth tokens and terminates any further API access.
### 7. Contact
For any questions or privacy inquiries regarding theGerb Workspace Automation, contact:
Chris Gerber — chris@thegerb.com