Privacy Policy

Effective date: 25 September 2026

Masashi AI Office is a private, owner-operated project-administration system. This policy explains how it accesses, uses, stores, and shares Google user data.

1. Google data accessed

When the owner authorizes Gmail access, Masashi AI Office uses the read-only Gmail scope https://www.googleapis.com/auth/gmail.readonly. The system may access message metadata, headers, sender and recipient information, subject lines, message bodies, thread information, and other content necessary to identify and process project-related communications.

2. Purpose of use

Google user data is used only to provide the owner with project-administration functionality, including organizing project evidence, maintaining structured project state, identifying tasks, commitments, schedules, decisions, risks, and follow-up actions, and preparing owner-facing summaries or review items.

3. Storage and retention

Relevant project evidence and derived project-state information may be stored in private infrastructure used by Masashi AI Office. Data is retained only for as long as reasonably needed for the owner’s project-administration purposes, continuity, auditability, and backup, or until the owner deletes it or stops using the system.

4. Service providers and sharing

Masashi AI Office does not sell Google user data, use it for advertising, or share it with unrelated third parties. Data may be processed by infrastructure and service providers used solely to operate the system, such as cloud hosting, AI processing, and private storage providers. Such processing is limited to providing the system’s owner-facing functionality and is not for advertising purposes.

5. Limited Use

The use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

6. Security

Access credentials and tokens are kept in protected application secrets rather than exposed in public web pages. Access is limited to what is needed to operate the system, and Gmail API access is read-only.

7. Revoking access and deletion

The owner may revoke Google access at any time through the Google Account security settings. The owner may also remove stored project evidence and derived data from the private system.

8. Changes

This policy may be updated if the system’s data practices or functionality change. Material changes affecting Google user data will be reflected here before the data is used for a new purpose.