Privacy policy

Google data the application can access

The application requests Gmail read-only access. That scope permits viewing Gmail messages and settings. The implemented workflow uses that access to retrieve authentication and verification messages needed for approved Cruxia Studio services.

How Google user data is used

• Identify the newest provider verification message after a login request.
• Extract the provider-issued one-time verification code.
• Return that code only to the same external service that issued it to complete authentication.
• Maintain the minimum OAuth credentials required for unattended Gmail read access.

The application does not request Gmail send, compose, modify, or delete permissions.

Storage and retention

OAuth refresh credentials are stored in the protected local secret mechanism used by the owner-operated system. Access tokens are short-lived. One-time verification codes are processed ephemerally and are not retained as application content. Sanitized operational receipts may record provider, sender domain, subject pattern, timing, and success/failure, but not the real OTP value or message body.

Sharing, sale, advertising, and model training

Google user data is not sold. It is not used to build advertising profiles and is not used to train models. A verification code is transmitted only back to the provider that issued it when needed to complete that provider's authentication flow. Google user data is not otherwise shared for unrelated purposes.

Limited Use

Cruxia Studio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

The dedicated account owner can revoke Cruxia Studio's Google access at any time from the Google Account third-party connections and permissions page. Revocation prevents future unattended Gmail access until the owner authorizes the application again.

Manage Google Account connections

Contact

Questions about this integration or this privacy policy can be sent to itscruxia@gmail.com.