How we handle data.

This website

inarg.com is a static website. It sets no cookies, runs no advertising or analytics trackers, and does not build visitor profiles.

Our hosting provider processes standard technical data — IP address, requested URL, browser type, timestamp — in order to deliver pages and protect the service against abuse. These logs are retained by the provider for a short period for security purposes only.

Connected applications and Google user data

Some INARG-operated internal tools connect to third-party accounts with the account holder's explicit consent. Where that account is a Google Account, authorisation is granted through Google's OAuth consent screen, and the tool can access only the data covered by the permissions shown there.

Depending on what the account holder approves, this may include Gmail messages and threads, Calendar events, Tasks, Contacts, and files in Google Drive. We use this data solely to provide the features the account holder asked for: retrieving and summarising requested messages, preparing drafts, creating or updating events and tasks, and fetching requested documents.

What we do not do

• We do not use Google user data for advertising, and we do not sell it.
• We do not use it to train or improve generalised machine-learning models.
• We do not allow humans to read it, except where the account holder asks us to, where it is necessary for security or to comply with the law, or for aggregated, anonymised operational metrics.
• We do not share it with third parties, beyond service providers acting on our instructions (hosting and storage) or where the law requires it.

Limited Use

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and retention

Authorisation tokens are held on the infrastructure that runs the tool and are protected by the operating system's credential store or an equivalent secret store. Data retrieved from a connected account is processed only as far as needed to carry out the requested task. Material is not kept beyond that need, unless it remains in the account holder's own account or they ask us to keep it.

Your choices

• Revoke a connected application's access at any time in your Google Account permissions. Revoking access stops any further retrieval.
• Ask us what data we hold, or ask us to delete it, by writing to the address below. We respond within 30 days.
• Revoking access does not by itself delete copies already retrieved; ask us and we will remove them.

Security

We apply reasonable technical and organisational measures to protect the data we process: access is limited to the people who need it, and data is transmitted over encrypted connections.

Changes

If this policy changes, we update the date at the top of this page. Substantial changes will be described here.

Contact

Questions about this policy, or requests concerning your data: [email protected]. INARG, Switzerland.