AutoSpotGMYOUR ACCOUNT. CLEAR TERMS.
Privacy Policy
How AutoSpotGM handles information in the web, iPhone, and Android service.
Who operates this service
AutoSpotGM is the service name used in this policy. Contact the operator for privacy questions or requests at jamebbon16@gmail.com. This policy covers our application, not the independent practices of services you connect.
Information we collect
Account information includes your email, password hash, first and last name, phone number, mailing and billing addresses, communication choices, and records of terms acceptance. Registration currently requires those profile details. Addresses and phone numbers are stored in your profile. Providing a billing address does not authorize a charge. Paid checkout is available only after Square merchant setup has been verified; optional postal campaigns are not active.
Workspace information includes chat messages, plans, reminders, drafts, work settings, document/spreadsheet/presentation content, files, and account-specific email view settings, plain-text email signatures, and aggregate email-polishing request counts. Information you send to our support contact is handled as support correspondence.
Connected-provider information can include account email addresses, permission scopes, encrypted access/refresh tokens, message headers and contents you request, draft/send outcomes, Calendar data, cleanup previews, and export records. Email content is retrieved as needed; the app does not create a complete permanent mirror of your mailbox. Workspace drafts and message text you save to chat or documents can persist in your account.
Session cookies, local recovery storage, and technical request/security information support the service. Authentication rate limits use hashed identifiers. Hosting and network providers may process IP addresses, user agents, and operational logs under their own retention rules.
How we use information
We use information to maintain accounts, display and synchronize your workspace, provide requested AI and provider features, save files, honor your preferences, protect accounts, handle support, and meet applicable obligations. Promotional email/postal choices are separate opt-ins and default off. Briefing delivery is not active. Gift-card requests are reviewed and fulfilled manually by the admin, using the delivery details you confirm. Account administrators can manage customer profiles, suspension, password links, and deletion. A configured owner mailbox can send essential account emails.
We do not currently operate advertising SDKs or sell personal information for targeted advertising. Do not upload information you are not authorized to use.
AI, email, Calendar, and Google Drive
AI chat sends the conversation and limited planning context submitted by the app to OpenAI. Your profile addresses and phone number are not automatically placed in AI context. Mailbox contents and private files are not automatically sent to AI; content you choose to paste into chat becomes part of that request. If you choose AI email polishing and approve sharing, the selected subject and message are sent to OpenAI to produce a reviewable draft; the To field is excluded, but any addresses or other details written in the message are included. API response storage is requested off, but provider security/abuse retention can still apply. No zero-retention guarantee is made.
Gmail, Outlook, and optional Calendar access begin after provider consent. Sending mail and mailbox cleanup require your review and confirmation. Disconnecting removes this app’s stored connection; you can also revoke access in the provider account.
Google Drive export uses separate per-file permission. A Google copy transmits the selected saved document, its title, and necessary metadata to your Google Drive. It is a separate snapshot, not automatic two-way editing sync. Google copies remain there after local account deletion.
Google API Limited Use
Our handling and transfer of information obtained through Google APIs follows the Google API Services User Data Policy, including Limited Use requirements. Such data supports the user-facing features you authorize. It is not used for advertising, data-broker resale, credit decisions, or general-purpose model training. Human access is limited to your specific affirmative permission or the security, legal, and permitted internal-operation exceptions in that policy.
Other recipients and optional features
Hosting/storage providers process information needed to run the service; OpenAI processes requested AI input; Google and Microsoft process their connected features. These providers apply their own service and data-protection terms. Information may be processed in the United States or other locations where they operate. We may disclose information when legally required, to address security/abuse, or as part of a lawful business transfer with appropriate protections.
Where supported and authorized, weather requests use approximate coordinates rounded by the web client before transmission to Open-Meteo. Those coordinates are not stored as part of the workspace. Web/Tools fonts may be loaded from Google Fonts, which receives ordinary network request information. Square processes web subscription checkout, payment-card details, recurring payments, and refunds for the connected Fusion Foods LLC or Cayde Entertainment merchant. We store necessary checkout consent, merchant references, subscription status, and verified payment-period records; our app does not receive your full card number. The merchant notice is displayed before every checkout.
Storage, retention, and deletion
Gift-card requests keep the confirmed delivery snapshot, fulfillment references, and status. Payment/refund and necessary admin/security records may be retained separately from an account to finish transactions or meet obligations. Password tokens are stored as hashes, expire, and are single use. Active account records and files remain until you remove them or delete your account, subject to operational/security requirements. Provider tokens are encrypted on the server; passwords are hashed; these controls are not a guarantee against every incident or an assertion of end-to-end encryption. Sessions expire, but some security/action records can remain longer.
Account deletion revokes sessions, locks new work, deletes stored private files in batches, and then removes live account records. Temporary failures may require resuming deletion. Hosting backups, security records, and legally required records may persist under applicable provider schedules or obligations and are not intended for normal account use. We do not promise a fixed backup-erasure deadline that the hosting provider has not confirmed.
Protected local recovery caches and downloaded/shared copies can remain on your devices or other services. Logging out or deleting the server account cannot remotely erase every offline or exported copy. Mailbox messages and Google copies are not deleted from their providers by account deletion. A keyed hash of the signup email and original trial-start time is retained separately to prevent repeated free trials; it contains no mailbox content and is not removed by account deletion. Separate web admin credentials, access grants, and admin security/audit records support operating the service.
Your choices and contact
You can edit profile/communication choices, export workspace and file copies, disconnect integrations, and request account deletion. Depending on applicable law, you may also request access, correction, deletion, portability, or information about our handling of your data. Contact jamebbon16@gmail.com; we may need to verify account control before acting. You may contact an appropriate privacy regulator.
Web changes apply automatically when unsaved work is safe. iPhone app updates follow the device App Store settings; Android may offer a Google Play update. Public release-version checks do not send mailbox contents or documents. The service is intended for adults at least 18 years old. We do not knowingly offer accounts to children. If you believe a child supplied information, contact us. Material privacy changes will be dated and communicated through the app or another appropriate channel before new consent-dependent uses.