Privacy Policy — Ig‑Creator

1) What we do

Ig‑Creator connects to your Google account via OAuth to access Gmail in read‑only mode solely for features you choose to use. We do not send, delete, or modify emails.

2) Data we access

• Google account information provided through OAuth (e.g., your Google email address).
• OAuth tokens (access/refresh) required to access Gmail with your permission.
• Gmail data with the scope: https://www.googleapis.com/auth/gmail.readonly:
  • Message metadata (e.g., message ID, sender, subject, timestamps, labels).
  • Message content only when required to fulfill a user‑initiated feature that displays or extracts information.

We do not request broader scopes and do not use your Gmail for advertising.

3) How we use information

• Authenticate you via OAuth and maintain your approved connection.
• Retrieve and display Gmail data strictly to provide user‑facing features you initiate.
• Operate, secure, debug, and improve the Services (e.g., basic error logs that do not intentionally include Gmail content).

4) Data storage and retention

• Gmail content: processed ephemerally to fulfill your requests and not stored on our servers by default. If a feature temporarily caches data, it is kept only as long as necessary for that feature.
• OAuth tokens: stored securely (encrypted at rest) to maintain your approved access; deleted when you revoke access or after prolonged inactivity.
• Diagnostic logs: minimal technical logs retained up to 90 days unless needed longer to investigate abuse or comply with law.

5) Data sharing

We do not sell your personal information. We may share limited data only:

• With service providers (e.g., secure hosting or error monitoring) under strict confidentiality and security obligations.
• To comply with law, legal process, or enforceable governmental request.
• To protect the safety, rights, or property of users, the public, or Ig‑Creator.
• In a merger, acquisition, or asset transfer, subject to this Policy or an equivalent successor policy.

6) Your choices and control

• You can revoke Ig‑Creator’s access at any time in your Google Account → Security → Third‑party access.
• You can request deletion of any server‑stored personal data associated with your account.
• If your device or browser stores local data (e.g., cached session), you can clear it using your device/browser settings.

7) Security

We use industry‑standard safeguards, including encryption in transit (TLS), encryption at rest for stored tokens, least‑privilege access controls, and routine security reviews. No method is 100% secure; we continuously work to improve our protections.

8) Children’s privacy

The Services are not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.

9) International transfers

If data is processed outside your country, we apply appropriate safeguards as required by applicable laws.

10) Policy changes

We may update this Policy to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated Policy with a new “Last updated” date. Your continued use of the Services after changes become effective constitutes acceptance.

11) Compliance with Google policies

Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

12) Contact

For questions or requests (including data deletion or revocation assistance), contact:
Email: zakuk0939@gmail.com