Primus Labs builds and operates software, including internal automation tools used by our own team. This policy explains what data those tools collect, how it is used, and — in particular — how they handle Google user data obtained through Google OAuth.
1. Scope
This policy covers this website and the applications operated by Primus Labs that request authorization to a Google Account, including our internal mail assistant, which requests the Gmail read-only scope .../auth/gmail.readonly.
2. Google user data we access
When a person authorizes our mail assistant, the application receives read-only access to the Gmail mailbox of that account: message headers (sender, recipient, subject, date), message bodies, labels, and attachments.
We do not request, and therefore cannot use, permission to send, modify, or delete mail. Access exists only for accounts that have explicitly completed the Google consent flow.
3. How we use it
Google user data is used solely to provide features to the owner of that same account:
- delivering notifications about new mail to the account owner's own private messaging channel;
- letting the account owner search their own mailbox and read the results;
- retrieving an attachment when the account owner asks for it.
We do not use Google user data for advertising, profiling, credit assessment, lending, or resale, and we do not use it to train machine learning models.
4. Storage and retention
Authorization tokens are stored on a private server under access controls that restrict them to the server operator. They are never included in source control or logs.
Message content is retrieved on demand and relayed to the account owner. It is not accumulated in a permanent archive. Attachments are written to temporary storage only for as long as delivery requires, and are then removed.
5. Disclosure to third parties
We do not sell, rent, or trade Google user data. No person other than the account owner reads it as part of normal operation.
Where the account owner asks the assistant to summarize or classify a message, the relevant message text may be sent to our AI provider (Anthropic) purely to generate that result for the same account owner. That provider does not use the content to train its models. No other transfer of Google user data takes place.
6. Limited Use disclosure
Primus Labs' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
7. Withdrawing access and deleting data
Access can be withdrawn at any time, without contacting us, at myaccount.google.com/permissions. Once revoked, the stored token immediately stops working and the application can no longer read the mailbox.
To have any remaining stored tokens or cached data deleted, write to contact@primuslabs.world and we will remove them.
8. Other data from this website
This site collects aggregate, anonymous traffic measurements (page views and referrers) to understand usage. It does not require an account and does not collect Google user data.
9. Changes
If this policy changes in a way that affects how Google user data is handled, the updated date at the top of this page will change and the revised policy will be published here before the change takes effect.
10. Contact
Primus Labs — 15 Beach Road, #05-09, Beach Centre, Singapore 189677.
Questions about this policy: contact@primuslabs.world
See also our Terms of Service.