Privacy Policy

Jarvis — business assistant for PrintHavenAndCo · Effective 31 October 2026

This policy explains what the application Jarvis ("the app") does with Google user data. The app is operated by PrintHavenAndCo, a sole-proprietor digital-products shop in Jakarta, Indonesia. It has exactly one user: the shop owner, who is also the operator. There are no other accounts and no third-party users.

1. Google data the app accesses

• Gmail (read-only) — scope gmail.readonly. The app searches the owner's mailbox only for messages whose sender domain is etsy.com or amazon.com, in order to report new order, payout, and publication notifications. It cannot send, reply to, delete, label, or modify messages, and it does not read any other correspondence.
• Google Drive (app-created files only) — scope drive.file. The app creates and updates a shop asset library. It can only access files and folders that this application itself created; the rest of the owner's Drive is invisible to it.
• Google Calendar (app-created calendars only) — scope calendar.app.created. The app creates and manages one dedicated business calendar. Personal calendars are not accessible to it.

2. How the data is used

The data is used solely to operate the shop: surfacing order and payout notifications, keeping a verified backup copy of product files, and reminding the owner of scheduled business tasks. Nothing else.

3. Storage and retention

• Email content is not stored. Only a message identifier and timestamp are kept locally, so the same message is not reported twice. These identifiers are pruned automatically after three days.
• Files created in the app's own Drive folder remain there until the owner deletes them.
• Calendar entries remain until the owner deletes them.
• Credentials (OAuth tokens) are stored encrypted-at-rest on the operator's own server, reachable only by the operator.

4. Sharing

Google user data is never sold, rented, or shared with third parties. It is not used for advertising, profiling, or credit decisions, and it is not used to train or improve any machine-learning or AI model. No human other than the operator has access to it.

5. Limited Use disclosure

Jarvis's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Security

Access is limited to a single OAuth client with the three narrow scopes listed above. The server runs on a hardened host reachable only over key-based SSH, with a host firewall, and the tokens can be revoked at any time from the owner's Google Account (Security → Third-party apps & services).

7. Deletion and revocation

The owner can revoke the app's access at any time in the Google Account security settings. Revoking access immediately stops all further access. To request deletion of any data the app created (Drive folder, calendar, local identifiers), write to the contact address below and it will be removed within 7 days.

8. Changes

If this policy changes, the updated version will be published at this URL with a new effective date.

9. Contact

essenzo890@gmail.com
PrintHavenAndCo · Jakarta, Indonesia