Privacy Policy

1. Introduction

Voice Email Agent ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our voice-driven Gmail assistant service (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

2.2 Information Collected Automatically

2.3 Gmail Data Access

Through your explicit OAuth consent, we access:

• Gmail emails in your inbox (read-only for processing)
• Email metadata (sender, subject, date, labels)
• Gmail modification permissions (archive, delete, mark as read/unread)
• Email composition (for reply functionality)

3. How We Use Your Information

3.1 Primary Service Functions

• Email Processing: Read and process emails based on your voice commands
• Authentication: Verify your identity and maintain secure sessions
• Gmail Operations: Execute email actions (archive, delete, reply) as requested
• Voice Recognition: Convert your speech to actionable email commands

3.2 Service Improvement

• Error Analysis: Improve voice recognition and email processing accuracy
• Performance Monitoring: Optimize service speed and reliability
• Security Enhancement: Detect and prevent unauthorized access

3.3 Legal and Safety

• Compliance: Meet legal obligations and regulatory requirements
• Security: Protect against fraud, abuse, and security threats
• Support: Provide customer support and troubleshooting

4. Data Processing and Storage

4.1 Voice Data Processing

• Real-time Processing: Voice commands are processed immediately through Google's Gemini Live API
• No Permanent Storage: Voice recordings are not saved or stored after processing
• Secure Transmission: All voice data is encrypted during transmission

4.2 Session and Authentication Data

• Temporary Storage: Session data stored in memory during active use
• 24-Hour Expiry: Sessions automatically expire after 24 hours
• Encrypted Tokens: OAuth tokens are encrypted and securely managed
• Automatic Cleanup: Expired sessions are automatically removed

4.3 Gmail Data Handling

• No Email Storage: We do not store your email content on our servers
• Real-time Access: Emails are accessed only during active processing sessions
• User-Controlled: You control which emails are processed through voice commands

5. Data Sharing and Disclosure

5.1 Third-Party Services

5.2 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5.3 Legal Disclosures

We may disclose your information if required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Investigate potential violations of our terms of service
• Protect against legal liability

6. Data Security

6.1 Security Measures

• OAuth 2.0 Authentication: Industry-standard secure authentication
• Encrypted Transmission: All data transmitted using HTTPS/WSS encryption
• Session Security: Secure session management with automatic expiration
• Access Controls: Authentication required for all sensitive operations

6.2 Security Monitoring

• Unauthorized Access Prevention: Real-time monitoring for suspicious activity
• Rate Limiting: Protection against abuse and automated attacks
• Error Logging: Secure logging for debugging and security analysis

6.3 Data Breach Response

In the event of a security incident, we will:

• Immediately investigate and contain the incident
• Notify affected users within 72 hours
• Provide clear information about what data was affected
• Take steps to prevent future incidents

7. Your Privacy Rights

7.1 Access and Control

• Data Access: Request information about data we have collected about you
• Data Correction: Request correction of inaccurate personal information
• Data Deletion: Request deletion of your personal information
• Account Termination: Delete your account and associated data at any time

7.2 OAuth Permissions

• Granular Control: You control which Gmail permissions you grant
• Revoke Access: You can revoke OAuth permissions at any time through your Google account
• Selective Processing: You choose which emails to process with voice commands

7.3 Communication Preferences

• Opt-out: Unsubscribe from non-essential communications
• Support Contact: Contact us regarding privacy concerns or requests

8. Data Retention

8.1 Retention Periods

• Session Data: Automatically deleted after 24 hours
• OAuth Tokens: Retained until you revoke access or delete your account
• Error Logs: Retained for 30 days for debugging purposes
• Usage Statistics: Anonymized data may be retained for service improvement

8.2 Data Deletion

• Account Deletion: All personal data deleted within 30 days of account deletion
• OAuth Revocation: Associated data deleted when you revoke Gmail permissions
• Automatic Cleanup: Expired sessions and temporary data automatically removed

9. Children's Privacy

Our Service is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete that information immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to Know: Request information about personal information collected, used, or shared
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell data)
• Non-Discrimination: We will not discriminate against you for exercising these rights

To exercise these rights, contact us at benjamingonzales121102@gmail.com.

12. European Union Privacy Rights (GDPR)

If you are in the European Union, you have rights under the General Data Protection Regulation:

• Lawful Basis: We process data based on consent and legitimate interests
• Data Portability: Request your data in a portable format
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of personal data
• Right to Restrict Processing: Limit how we process your data
• Right to Object: Object to processing based on legitimate interests

Contact us at benjamingonzales121102@gmail.com to exercise these rights.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on our website
• Sending you an email notification (if you have provided an email address)
• Displaying a prominent notice in the application

Your continued use of the Service after any changes constitutes acceptance of the new Privacy Policy.

14. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

For privacy-related requests, please include:

• Your name and email address
• Specific request or concern
• Any relevant account information

We will respond to privacy requests within 30 days.

15. Effective Date

This Privacy Policy is effective as of January 15, 2025 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

This Privacy Policy was last updated on January 15, 2025.