Privacy Policy for NTU Gmail Sync
Effective date: September 2, 2026
This Privacy Policy explains how NTU Gmail Sync handles information when a user connects a Google account to the application.
1. Information the application may access
Depending on the permissions shown on the Google OAuth consent screen and the features the user chooses to use, NTU Gmail Sync may access:
- Basic Google account information needed to identify the signed-in account, such as account identifier and email address.
- Gmail data and metadata that are necessary to perform the synchronization operation requested by the user.
- OAuth authorization credentials or tokens required to maintain the authorized connection to Google services.
The application does not request access to Google user data unrelated to its Gmail synchronization functionality.
2. How Google user data is used
Google user data is used only to authenticate the user, perform the Gmail synchronization actions requested by the user, maintain the authorized connection, and operate or troubleshoot the application. Google user data is not used for advertising, profiling, or unrelated purposes.
3. Data sharing and disclosure
NTU Gmail Sync does not sell Google user data. Google user data is not shared with third parties except when necessary to provide the application's user-requested functionality, to operate infrastructure acting on behalf of the application, or when disclosure is required by law. Any service provider used for application infrastructure is permitted to process data only as needed to provide that service.
4. Data storage and security
OAuth credentials and other application data are retained only for as long as reasonably necessary to provide the authorized functionality. Reasonable technical measures are used to protect stored credentials and user data against unauthorized access, disclosure, alteration, or destruction.
5. Data retention and deletion
A user can revoke NTU Gmail Sync's Google Account access at any time from the security settings of their Google Account. When authorization is revoked, the application can no longer access new Google user data through that authorization. Users may also request deletion of application-held data associated with their authorization through the project repository's contact channel.
6. Limited use of Google user data
NTU Gmail Sync's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
7. Changes to this policy
This Privacy Policy may be updated when the application's features or data practices change. The effective date above will be updated when a material revision is published.
8. Contact
Questions or privacy requests may be submitted through the GitHub issue tracker for this project. Do not include passwords, OAuth tokens, email contents, or other sensitive information in a public issue.