Your inbox remains yours.

1. Scope

After Hours Appointment Caller is a private, single-user notification service. It is not offered as a general public email product and does not create profiles for advertising or marketing.

2. Information the service accesses

After the Gmail account owner gives explicit OAuth consent, the service may access:

• Gmail message identifiers, sender, subject, received time, and relevant message text;
• appointment dates and times extracted from relevant messages;
• OAuth credentials required to maintain the authorised connection;
• Twilio call identifiers, delivery status, and limited operational logs.

The service does not request permission to send, delete, or modify Gmail messages.

3. How information is used

Gmail information is used only to:

• detect newly received appointment-related messages;
• extract the minimum details needed for a useful notification;
• initiate or schedule a phone call to the authorised account owner;
• prevent duplicate calls, recover from failures, and maintain service security.

Gmail information is not used for advertising, sold, rented, or used to build user profiles. It is not used to train general-purpose AI models.

4. Service providers and disclosure

Information is processed by Google Cloud for hosting, secure storage, event delivery, and monitoring. The minimum notification content and destination number required to place a call are provided to Twilio. Information may also be disclosed where required by applicable law.

5. Storage and retention

Email body content is processed transiently and is not retained after the notification decision. Message identifiers, extracted appointment details, call status, and security records may be retained for up to 30 days for deduplication, troubleshooting, and audit purposes. OAuth credentials remain stored until access is revoked or the service is retired.

6. Security

The service uses encrypted Google Cloud storage, Secret Manager, narrowly scoped service identities, authenticated internal requests, and signed Twilio webhook validation. No security method can guarantee absolute protection, but access is designed around least privilege.

7. Your choices

The Gmail account owner can revoke access at any time from the Google Account third-party connections page. Revocation stops future Gmail access. Privacy questions or deletion requests can be sent to the support address displayed on the Google OAuth consent screen.

8. Google API Services User Data Policy

The service’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

9. Children and sensitive use

The service is not directed to children and is not a medical advice, diagnosis, clinical monitoring, or emergency response service.

10. Changes

This policy may be updated when the service or its data practices change. The effective date above will be updated when material changes are published.