GRIMLOCK AUTOMATIONS
Privacy Policy
This policy explains how Grimlock Automations accesses, uses, stores, shares and deletes information when an account owner connects Google services to a configured automation.
1. Scope
Grimlock Automations is a privately operated workflow system from Gizzard Labs. It currently supports a small set of owner-managed automations and does not offer public self-service registration. This policy applies to Google Account information processed through Grimlock Automations.
2. Information accessed
The precise information depends on the features the account owner enables and the permissions shown during Google authorization. It may include:
- Account identity: the connected account's email address and basic identity information.
- Gmail: messages, message metadata, threads and attachments needed for configured monitoring workflows; and permission to send owner-authorized notifications or messages.
- Google Drive: file names, identifiers and metadata needed to locate authorized resources, plus files created by or deliberately provided to the automation.
- Google Sheets: content and structure of designated spreadsheets used by configured workflows.
- Google Docs: content and structure of designated documents used by configured workflows.
Grimlock Automations does not intentionally access unrelated Google data. Owners should connect only accounts and resources appropriate for the automation they configure.
3. How information is used
Google user data is used only to provide and maintain features requested by the account owner, including:
- authenticating and identifying the connected account;
- monitoring configured mailboxes or files for relevant changes;
- applying the owner's written workflow rules;
- reading or updating designated documents and spreadsheets;
- creating owner-requested outputs and audit records;
- sending owner-authorized notifications or messages; and
- troubleshooting, securing and maintaining the configured service.
Google user data is not used for advertising, sold to data brokers, used to determine creditworthiness or used to train generalized artificial-intelligence models.
4. Google API Limited Use
Our handling of information obtained through Google APIs follows the Google API Services User Data Policy and its Limited Use requirements.
Access is limited to providing or improving the specific, user-facing automation requested by the account owner. Permissions are not used for unrelated products or undisclosed purposes.
5. Automated and AI-assisted processing
Some configured workflows use rules-based automation or an AI processing service selected by the account owner. When a workflow requires an external processor, only the information reasonably necessary to perform the requested feature is provided, under the owner's authorization and the processor's applicable data-protection terms. Gizzard Labs does not permit Google user data processed by Grimlock Automations to be used to train or improve a generalized AI model.
6. Storage and security
Grimlock Automations runs in a privately administered server environment. OAuth credentials and tokens are kept in access-controlled configuration storage and are not intentionally included in public source code or public website content. Workflow outputs and audit records may be stored in the owner's designated local or Google resources.
Reasonable administrative and technical safeguards are used to restrict access and protect stored credentials and workflow data. No system can guarantee absolute security.
7. Sharing and disclosure
Gizzard Labs does not sell or rent Google user data. Information is disclosed only:
- to service providers necessary to deliver an owner-requested feature and with appropriate authorization;
- when the account owner directs or consents to the disclosure;
- when reasonably necessary to investigate abuse or protect the security of the service; or
- when required by applicable law.
Human access to message or file content is limited to owner-authorized support, security investigation or legal obligations.
8. Retention and deletion
OAuth tokens are retained while the connection remains active and are deleted or invalidated when the connection is permanently removed. Temporary source content is retained only as long as reasonably necessary to complete and verify a workflow, unless the owner directs that it be preserved in an output or audit record.
Owner-directed records, reports and audit history remain until the owner deletes them or requests deletion. Limited backup copies may persist temporarily until normal backup rotation completes. Information may be retained longer when required for security, dispute resolution or legal compliance.
9. Owner choices and controls
The account owner may:
- decline requested Google permissions;
- disable a configured automation;
- revoke access through Google Account third-party connections;
- delete owner-controlled output files and records; and
- request access, correction or deletion by contacting Gizzard Labs.
10. Family use
A privately configured family workflow may process information supplied or authorized by a parent or guardian. Grimlock Automations is not offered publicly to children, and it does not knowingly invite children to create accounts.
11. Changes to this policy
This policy may be updated as the service changes. The effective date above will be revised when material changes are published.
12. Contact
For privacy questions, access requests or deletion requests, contact info@gizzardlabs.com.