/edge/privacy
Privacy policy
This policy covers the Google data of a person who connects Google at this edge. It is the page the OAuth client names, and it says what the service does, in plain words.
What Google data the calls return
The Google calls a yard makes return what those calls are for: Drive file and folder names and the contents of files this service made, the text of documents and presentations, calendar lists and events, and the connected account's email address, which names the connection. The scopes asked for are only those: identity and email, Drive files the app creates, documents, presentations, and calendar events with the calendar list.
What the edge keeps, and how
The edge keeps your Google account's email address and the scopes Google granted, joined to your edge account so the Google page can name the connection and show which sources are available. It also records when the connection was made and last updated. The edge keeps Google's refresh token encrypted with AES-256-GCM under a key kept apart from the store, so that a yard can ask the edge for short-lived access tokens. Access tokens are made on demand and are never stored. The refresh token stays until you disconnect Google. Other Google data returned by a call passes to the yard that asked and is kept only as that yard keeps its own work.
Where a call's answer goes
A call's answer travels to the yard that asked, where it becomes input to the agent working in that yard, and may from there be sent to the model provider that yard is configured with, to do the work the call was part of. That transfer is part of the visible feature the call serves, and it is what connecting consents to. A yard sends Google data to a model provider only where that provider's terms impose the training bar below.
Google data, and anything derived from it, is not used to create, train or improve a general machine-learning or AI model, beyond a personalized model for your own feature. The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.
Nothing is sold, used for advertising, or shared for any other purpose. No person reads your Google data outside these cases: you ask for it to be shown to you, the operator must keep the service running or answer a fault in it, or the law requires it.
How you manage and delete your data
The Google page shows the account connected, which of Drive, Docs, Slides and Calendar Google granted, and Disconnect. Disconnect deletes the stored token at once: the edge tries to revoke the grant at Google too, and where that fails the page says the grant may still live at Google until you revoke it yourself. You can revoke this service at any time, with no step depending on this edge answering, on Google's permissions page. Deleting the stored token ends every yard's minting at once; the yards keep work they already hold as their own pages describe.