Privacy policy

Effective October 8, 2026. This policy applies to Home data email archive, a personal application used by its owner.

Information accessed

With the owner’s authorization, the app reads Gmail messages, including headers, bodies and attachments, mailbox labels, identifiers and synchronization history. This may include Spam and Trash. It also reads the owner’s subscribed calendar list and accessible calendar events, including titles, descriptions, locations, dates, time zones, attendees, organizers and recurrence information; and saved Google Contacts, including names, email addresses, phone numbers, addresses, organizations, birthdays, notes and other saved contact fields. Permissions are read-only. Gmail profile information confirms that the connected account belongs to the owner.

Purpose and processing

Data is used for personal backup, purchase records, a regularly updated local contact list and local calendar records. Contact changes, event changes and deletion or cancellation markers are synchronized. Recurring events retain recurrence rules and exceptions rather than generating an unlimited series of rows. Other receipt and travel formats may be retained as local review candidates. Retrieved content is not executed as instructions, and links in messages, contacts or events are not automatically visited.

Storage and protection

Original email files are compressed and encrypted with AES-256-GCM on the owner’s home server. Email metadata, extracted records and contact/calendar data are stored under restricted access; database records are not individually encrypted by the application. OAuth credentials and encryption keys are kept in protected server files. Connections to the database use verified TLS. Selected database backups and credentials are encrypted before off-site storage with Backblaze B2. Private dashboards do not expose OAuth credentials.

Sharing and use limits

The application does not sell Google data, use it for advertising, share it with third-party analytics services or use it to train generalized AI or machine learning models. API requests go to Google; processing runs on the owner’s infrastructure. Backblaze receives encrypted backups of selected records and credentials. Human access is limited to the owner and people the owner explicitly authorizes to maintain or review the system.

Home data email archive’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention, deletion and revocation

Archived messages and retained contact/calendar records remain until the owner deletes them locally. Gmail deletion does not delete archived messages. Deleted contacts and cancelled events are marked locally; previous local details may remain for personal record keeping. Removed calendars are marked inactive. The owner can delete local files and database records and revoke access through Google Account permissions. Revocation stops future collection but does not delete existing local copies. Encrypted backups expire according to the configured retention policy, so deletion may take time to reach all backups. The app cannot modify or delete records in Google.

Contact

For questions or requests concerning this personal tool, contact tedpower@gmail.com. This tool does not accept public users or collect visitor information through forms. The site has no analytics scripts or tracking cookies; its hosting provider may process standard request logs to operate the website.