toposiq / orchestrator
Data practices

Privacy Policy

Effective date: 23 October 2026 · Applies only to ToposIQ Orchestrator and this informational site.

1. Operator and contact

ToposIQ Orchestrator is a privately operated local development utility. Questions or requests about this tool's use of Google data may be sent to tsirigotakis.george@gmail.com.

2. Data and permission requested

With the operator's consent, the desktop utility requests only the Google Gmail API scope https://www.googleapis.com/auth/gmail.send. This permits outbound sending through the authorized Gmail account. The utility does not request Gmail read, search, modify, or delete permissions; it does not request Google Drive, Google Sheets, or password-manager access.

3. How data is used

The tool may process the authorized sender and allowlisted recipient address, minimal message content describing a local job's state, a job identifier, an approval reference when needed, and delivery-status metadata. These details are used to compose and send status emails and to prevent unintended repeat delivery. Email content is delivered using Google's Gmail API and handled by Google under its own terms and privacy rules.

Receiving an email never constitutes approval of a development action. A separate, authenticated and explicitly authorized process is required for consequential actions.

4. Local storage and retention

The local utility stores its Google OAuth authorization material in a protected directory on the operator's Windows device, separate from this public website. It may retain local technical journals and notification history needed for auditing, troubleshooting, and duplicate prevention. Such local records are controlled by the operator. No fixed automatic deletion period is represented by this policy; retention settings will be reviewed as the utility evolves.

5. Sharing and external services

Google receives the data necessary to deliver messages through Gmail. Public website requests are processed by the website hosting provider, which may maintain operational access and security logs under its own policies. The operator does not intentionally sell Google user data, disclose it to advertisers, or use it for advertising.

6. This website

These pages are static. They do not provide account registration, contact forms, embedded analytics, or intentionally installed tracking scripts or marketing cookies. The public site does not contain Gmail credentials or tokens, private repository content, or a remote-control interface.

7. Consent and revocation

The account holder can revoke access to the Gmail integration at any time through Google Account — Third-party connections. The operator can also disable outbound notifications in the local utility. Revoking authorization may prevent future sends; previously delivered messages and local audit records are handled separately.

8. Policy updates

Changes to the tool's Google data practices will be reflected here before materially expanded use. The scope of consent must remain no broader than the application's operational need.