Information & choices

Privacy policy — Grace Oakwood

Last updated: 2026-10-15. Website: https://grace.dean-powell.com

Purpose and access

Grace Oakwood is a private personal and household assistant, not a public signup service. It uses Google services only through permissions granted to the app and for authorized tasks or configured workflows. This public information website has no sign-in, OAuth callback, API or account dashboard and does not collect Google credentials through a form.

Google information used

Gmail access supports reading messages, email summaries, attachment extraction (including text from image attachments), sending or replying to email when authorized, and applying Reported labels to record messages included in reports. Information used may include message text, headers, participants, labels and attachments.

Calendar access supports reading calendar information and creating, updating or removing events for authorized planning tasks. Drive, Docs and Sheets access supports finding and reading files, extracting information, and creating or updating files, documents and spreadsheets when requested and authorized. Information used may include event details, file metadata and document or spreadsheet contents. Read-only Contacts access supports contact lookup when requested, including names and contact details; it does not allow the app to edit Google contacts.

Google permissions may allow broader access than a single task requires. The operator is responsible for reviewing granted permissions and the tasks or workflows that use them.

Storage and retention

OAuth tokens and authorized content are stored locally on operator-controlled hosts. Local logs, reports, memory and backups may retain information after a task is finished. There is no fixed automatic purge period for this locally retained data. This policy does not promise exclusively local processing.

Hosted processing and messaging

Relevant selected content may be processed by selected hosted AI providers, currently OpenAI, to carry out assistant tasks. Selected content or outputs may also be delivered through configured messaging services, including Telegram or WhatsApp where authorized. Those services process information under their own terms and settings. This policy does not make a provider-wide no-retention or no-training promise.

This website and Cloudflare

Cloudflare hosts only the public static information pages for this website and may process request metadata, such as IP addresses, request times and browser information, to deliver and protect those pages. It handles website requests, not OAuth tokens or email content on this website. The static pages have no analytics, tracking scripts, forms, externally loaded fonts or other external assets. Visiting these pages does not authorize Google access.

Use, disclosure and human access

The app does not sell personal information or use it for advertising. The app does not train or fine-tune generalized AI models. These statements describe the app's own use; they are not claims about every provider's data practices.

The human operator may access tokens, authorized content and retained records for administration, troubleshooting and carrying out authorized assistance. The processing and messaging described above can disclose selected content to those configured services. This policy makes no independent security-certification or compliance guarantee.

Revoking access and requesting deletion

You can revoke the app's connection in your Google Account's third-party connections settings. Revocation stops future authorized API access through that connection, but it does not automatically erase information already stored locally, sent through messaging services or retained in backups.

For deletion requests, contact the operator. The operator must review what can be removed from active storage and what remains in logs, memory, reports, backups or third-party services. There is no fixed deletion deadline or automatic backup-erasure promise in this policy.

Contact and policy review

Support contact: [email protected]. Use this contact for privacy questions or deletion requests. Do not send passwords, OAuth tokens or other credentials.

The operator is responsible for reviewing this policy as the app’s operation or selected services change. This policy describes data handling; it is not an independent security certification or compliance assessment.