Privacy Policy

Last updated: March 3, 2026

1. Introduction

gOOOvy ("we", "our", "the Service") is operated by Plocamium Holdings LLC. This Privacy Policy explains how we collect, use, and protect information when you use our Service.

2. Information We Collect

When you sign in with Google, we receive:

• Google account email address -- used to identify your account
• Gmail API access tokens -- used to read incoming Google Voice text notifications and send auto-reply emails on your behalf

When you subscribe, Stripe collects your payment information. We store only your Stripe customer ID and subscription status -- we never see or store your credit card number.

We also store your configuration data: OOO message, schedule preferences, VIP contact list, and activity log of auto-replies sent.

3. How We Use Your Information

• Gmail access: We use Gmail API access exclusively to detect incoming Google Voice text notifications and send auto-reply messages. We do not read, store, or process any other emails.
• Account management: Your email identifies your account and links your subscription.
• Service operation: Configuration data powers your OOO auto-replies.

4. Google API Services User Data Policy

gOOOvy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only access Gmail data necessary to provide the auto-reply service.
• We do not use Gmail data for advertising or marketing purposes.
• We do not sell, rent, or share Gmail data with third parties except as necessary to provide the Service.
• We do not use Gmail data for training machine learning or AI models.
• Human access to Gmail data is limited to debugging and support, with user consent.

5. Data Storage and Security

All data is stored in AWS DynamoDB with encryption at rest. OAuth tokens are stored securely and are only used to interact with the Gmail API on your behalf. All communication between your browser and our servers uses HTTPS/TLS encryption.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your configuration data and OAuth tokens are retained for 30 days in case you resubscribe, then permanently deleted. Activity logs are retained for 90 days.

7. Data Sharing

We do not sell, rent, or share your personal information with third parties, except:

• Stripe: Payment processing (governed by Stripe's Privacy Policy)
• Google: OAuth authentication and Gmail API interaction (governed by Google's Privacy Policy)
• AWS: Infrastructure hosting (governed by AWS Privacy Policy)
• Legal requirements: If required by law or valid legal process

8. Your Rights

You may:

• Revoke access: Remove our access at any time via Google Account Permissions
• Delete your data: Contact us to request complete deletion of your account data
• Export your data: Contact us to request a copy of your stored configuration and activity log

9. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. Continued use after changes constitutes acceptance.

11. Contact

For privacy questions or data requests, contact us at ios@gooovy.com.