Google API Services User Data Policy Compliance
Tidyflow’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
What Google User Data We Access
When you connect a Gmail account to Tidyflow via OAuth 2.0, we access the following categories of data from the Google Gmail API:
- Email message content (body text, subject lines)
- Sender and recipient information (names, email addresses)
- Email metadata (timestamps, read/unread status, labels)
- Attachments (where you choose to sync or access them within Tidyflow)
We request only the permissions necessary to provide the email functionality you have authorised. You can review the specific permissions requested during the OAuth consent process.
How We Use Google User Data
Tidyflow uses Google user data solely to provide email integration functionality within the Service:
- Syncing and displaying your emails within Tidyflow
- Composing, sending, and replying to emails on your behalf
- Organising email communications alongside your practice management workflows
We do not use Google user data for:
- Serving advertisements or any advertising-related purpose
- Market research unrelated to the Service
- Any purpose other than providing, maintaining, and improving the email integration functionality you have authorised
Limited Use Requirements
In accordance with the Google API Services User Data Policy, Tidyflow adheres to the following Limited Use requirements:
- No transfer to third parties except as necessary to provide or improve the Service, to comply with applicable laws, or as part of a merger, acquisition, or asset sale — and only with your consent where required
- No use for advertising — Google user data is never used for serving ads, including retargeting, personalised, or interest-based advertising
- No sale of data — Google user data is never sold, rented, or transferred to data brokers or information resellers
- No training of AI/ML models — Google user data is not used to train generalised or non-personalised artificial intelligence or machine learning models
AI Features and Google User Data
If you have enabled both Email Integration and Tidyflow’s optional AI Features (such as email summarisation), email data from your connected Gmail account may be transmitted to a third-party AI provider (currently OpenAI) solely to deliver the AI functionality you requested.
This transfer is:
- Performed only with your explicit consent (you must separately opt in to AI Features)
- Subject to data minimisation — personal identifiers are pseudonymised via tokenisation before transmission to the AI provider
- Necessary to provide the AI functionality you requested
- Consistent with the Limited Use requirements — the AI provider is contractually prohibited from using your data to train or improve its models, and the data is processed in real time only
You may disable AI Features at any time without affecting the email sync functionality. Full details are available in our AI Terms of Use.
How We Store Google User Data
Email data from connected Gmail accounts is synced and cached within Tidyflow’s infrastructure (hosted on DigitalOcean and AWS in the United States) for as long as the mailbox remains connected.
Tidyflow implements appropriate technical and organisational security measures to protect Google user data, including encryption in transit (TLS), encryption of sensitive data at rest, role-based access controls, and restricted internal access to production systems.
Data Retention and Deletion
When you disconnect a Gmail account from Tidyflow:
- Tidyflow will immediately cease syncing new data from that account
- Previously synced email data will be deleted in accordance with our internal retention policies, within 30 days of disconnection
You may also revoke Tidyflow’s access to your Gmail account at any time through your Google Account permissions.
Your Control
You retain full control over your Google user data:
- Connect and disconnect mailboxes at any time through your Tidyflow account settings
- Revoke access directly through your Google Account security settings
- Enable or disable AI Features independently of Email Integration
- Request deletion of your data in accordance with our Privacy Policy
Related Policies
Contact
For questions about how Tidyflow uses Google user data, please contact [email protected].