Privacy policy

Information GIR accesses

With the inbox owner’s authorization, GIR uses read-only Gmail access to retrieve relevant messages, including message identifiers, sender and recipient details, subjects, timestamps, message bodies and attachments. Mailbox change notifications and history identifiers may be used to discover new messages. Read-only access does not allow GIR to send mail or change mailbox contents.

How information is used

GIR uses this information to ingest supplier emails, identify offer documents, extract product descriptions, references, quantities and prices, and record processing results and errors. Authorized operators can inspect these results and diagnose failed processing.

Gmail information is used for this offer-processing workflow. It is not sold, used for advertising, or used by GIR to train generalized machine-learning models.

Processing providers and sharing

GIR uses Google Cloud for processing and private file storage, PlanetScale PostgreSQL for operational records, Typesafe for document classification, and OpenAI for offer extraction. Relevant document text, email context and attachments or prepared content may be sent to these services when needed for classification and extraction. Providers process information under their applicable service terms and data policies.

Project operators can access information needed to run and test GIR. Other disclosures may be made where legally required. This policy does not promise zero retention by processing providers.

Storage, security and retention

Raw emails, attachments and other processing assets are stored in private Google Cloud Storage. Email and document metadata, extracted offers and product rows, processing telemetry and references to stored assets are kept in a private PostgreSQL database. Credentials are handled separately from this public website.

Access is restricted through service credentials and project permissions. No method of storage or transmission is completely secure. Project records and stored files are retained until the operator deletes them; there is currently no automatic deletion schedule. Provider logs and backups may follow separate retention periods.

Your choices and deletion requests

The inbox owner can revoke GIR’s access through Google Account connections. Revoking access stops future authorized Gmail access but does not automatically remove information already stored.

For questions, access or deletion requests, contact the project operator directly through the private channel used to arrange your participation. There is no public registration or support inbox. The operator can arrange deletion of project-held records and assets, subject to applicable legal obligations and provider backup retention.

Google API data

GIR’s use of Google API information, including transfers to processing providers, is limited to providing and improving the user-facing offer-processing functionality described here and is subject to the Google API Services User Data Policy, including its Limited Use requirements.

This website and policy changes

This static website has no sign-in, contact forms, analytics scripts or advertising trackers added by GIR. The hosting provider may process technical request information, such as IP addresses, for hosting, security and reliability. This website does not display private emails or supplier data.

This policy may change as the testing project develops. The date above identifies the latest revision.