Privacy policy

Account and sign-in information

We use account names, usernames, password hashes, passkey public keys and credential identifiers, a secure session cookie, guest access settings, and sign-in audit records to authenticate users, control access, and investigate security issues. Audit records may include an IP address and browser information. Invitation links are single-use credentials and should be shared privately.

Google information we access

Only the signed-in owner can connect a Google account. With the owner’s consent, Davier Account obtains the account’s verified email address and the permissions listed below. It keeps an encrypted Google refresh token so Mail and Calendar can work in the background without asking the owner to reconnect for every use.

• Gmail: Davier Mail can read and search messages and their metadata, and organise messages, including changes such as read status, stars, and archive state. Message content and attachments may be accessed when needed for a feature the owner uses.
• Google Calendar: Davier Calendar can read the list of calendars and read, create, update, or delete events that the owner chooses to manage.

Each connected Google account has separate Mail and Calendar inclusion controls. Guests cannot use these Google connections.

How we use and share Google information

Google information is used to provide the owner-facing Mail and Calendar features described above. Davier Account passes Google API requests through a private broker to the relevant first-party service. Mail cannot use Calendar’s Google API access, and Calendar cannot use Gmail’s.

If the owner chooses to use a Mail AI feature, relevant message context may be processed by the separately connected ChatGPT service to answer that request or prepare a draft. The Mail agent does not send a message without a separate owner action. We do not sell Google information or use it for advertising.

Storage and security

Google credentials and tokens are encrypted in the private connection broker and are not stored in the Account database or returned to the browser. Mail and Calendar may keep local copies of information needed for their features. Connections use HTTPS, and Google access is limited to the signed-in owner and the selected service.

Control and deletion

The owner can turn off Mail or Calendar inclusion for a connected account in Davier Account, which removes that service’s local copy. Disconnecting an account revokes its Google grant and removes its stored connection credentials; both Mail and Calendar then lose access. The owner can also revoke access in their Google Account settings. Account and audit records are kept as needed to provide access and investigate security issues. Backups, if made, may retain prior copies until those backups are deleted. For questions about other stored copies or a deletion request, contact reivad@gmail.com.

Changes

We will update this page when the service or its use of information changes. A new use of Google information will be disclosed before it begins.