Ray DSH Email Agent

Privacy Policy

This policy explains how Ray DSH Email Agent accesses, uses, stores, and shares information when you authorize it to use your Google Account.

1. Application and purpose

Ray DSH Email Agent is a notification utility for Animation Studio. It sends production status messages and, when applicable, completed media from the Gmail account authorized by the operator to a configured recipient.

2. Google user data the app may access

The app requests one Google OAuth permission:

https://www.googleapis.com/auth/gmail.send

This permission allows the app to send email on your behalf. To do that, the app submits the sender and recipient addresses, subject, message body, and any selected attachment to the Gmail API. Google may return message and thread identifiers as delivery confirmation.

The app does not request permission to read, search, list, modify, or delete existing email, contacts, Google Drive files, calendars, or other Google Account data.

3. How the data is used

Google user data is used only to authenticate the authorized Gmail account, send the notification requested by the application, confirm whether delivery succeeded, prevent duplicate delivery, and diagnose a delivery failure. It is not used for advertising, profiling, surveillance, credit decisions, or training a general-purpose artificial intelligence or machine-learning model.

4. Storage and retention

  • OAuth credentials: the Google OAuth client credential and refresh token are stored locally on the operator's workstation in a restricted application configuration. They are retained until Google access is revoked, the app is reconfigured, or deletion is requested.
  • Access tokens: short-lived access tokens are used during delivery and are not intentionally saved to the application database.
  • Notification records: outgoing notification content, attachment path, delivery status, attempt history, and Google message or thread identifiers may be stored in the local Animation Studio database for reliable delivery, duplicate prevention, and audit. There is currently no automatic time-based deletion schedule. These local records are retained until the operator removes the related application data or asks for deletion.
  • Delivered email: sent messages may remain in the authorized account's Gmail Sent folder and in the recipient's mailbox according to their own retention settings. The app does not control those copies after delivery.

5. Sale and sharing of data

Google user data is never sold.

Data is shared only as necessary to provide the email feature: with Google to authenticate and transmit the email through Gmail, and with the configured recipient who receives the email and any attachment. The app does not share Google user data with advertisers, data brokers, analytics providers, or unrelated third parties. Data may be disclosed if required by applicable law or to address a security incident.

Human access is limited to the operator and, only when necessary, the developer with the user's explicit support request or where required for security or legal compliance.

6. Google API Limited Use

Ray DSH Email Agent's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Security

OAuth credentials are kept outside the source repository in restricted local files. Gmail API requests use encrypted HTTPS connections. No method of storage or transmission is completely secure, but access is limited to what the send-only function requires.

8. Revoke Google access

You can revoke access at any time from your Google Account connections page. Select Ray DSH Email Agent, review its access, and choose the option to remove access. Revocation prevents future Gmail API requests but does not automatically remove local records or email already delivered.

9. Request data deletion

Email shieldfast@gmail.com with the subject “Ray DSH Email Agent data deletion.” After identity and scope are confirmed, locally stored OAuth credentials and associated notification records will be deleted within 30 days. Copies already held by Google or an email recipient must be managed through those services.

10. Changes and contact

This policy may be updated if the application's data practices change. The updated date above will be revised, and any material change to Google user-data use will be disclosed before the new use begins.

Questions, support requests, and privacy requests: shieldfast@gmail.com.