Effective October 31, 2026

Privacy Policy

This policy describes how Sycamore Automation's private automated reporting application handles information when an authorized operator uses it to send operational reports.

Information processed

The application processes operational measurements and report recipient addresses supplied by its operator. To authorize sending, it uses Google OAuth credentials associated with the Gmail account selected by the operator.

Google user data and permissions

The application requests the Gmail API gmail.send scope only. This permission is used to send the operator's scheduled report emails. The application does not request Gmail inbox-reading access, and does not use Gmail data for advertising, profiling, or model training.

Storage and security

OAuth authorization tokens and application configuration are stored in the operator-controlled environment and are used to authenticate outbound Gmail API requests. The application does not maintain a public database of Google account information. Operational report contents may remain in the sent mailbox and recipients' mailboxes under their respective email providers' retention practices.

Sharing

Report contents and recipient email addresses are transmitted to Google solely to deliver messages through the Gmail API and to the recipients designated by the operator. Sycamore Automation does not sell Google user data or share it with advertisers.

Retention and deletion

The operator can revoke the application's Google access through their Google Account security settings and can delete locally stored OAuth credentials. Copies of sent messages can be managed through the sending account and recipient mailboxes.

Changes

This policy may be updated if the application's functionality or data practices change. The effective date above will be revised when material changes are published.

Contact

For privacy questions, email gregory.miller@sycamoreautomation.com.