Privacy Policy — TMBRAIN Founder Gmail Connector

Effective date: 2026-08-29

Governance owner: Dr. Tamer Mohamed Ahmed.

Scope and audience

This policy covers the private TMBRAIN Founder Gmail Connector used only by the Founder with one Founder-controlled Personal Gmail mailbox on one Founder-controlled local TMBRAIN device. The connector is not a public service.

Google data accessed

The connector requests only https://www.googleapis.com/auth/gmail.readonly. It may read Gmail messages and associated metadata only to derive Founder-facing priority, waiting, action, decision, synchronization and reconciliation signals. It cannot send, compose, modify, delete or change Gmail settings.

Use of Google user data

Google user data is used only to provide and maintain the Founder-facing connector. It is not used for advertising, sale, lending or credit decisions, unrelated profiling, public analytics, model training or service to another person.

The use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security

OAuth tokens are stored only in an encrypted local token envelope protected by an independently governed AES-256 key. Gmail account identity is pseudonymized using an independently governed HMAC pepper. Gmail-derived operational records remain on the Founder-controlled local device and are protected by fail-closed configuration, least privilege, freshness, reconciliation and rollback controls.

No Gmail message content is stored or processed by a third-party or cloud content service. Provider notification metadata may be transported only under a separately approved transport gate and must not contain Gmail message content.

Sharing and human access

Gmail data is not sold or shared with advertisers or unrelated third parties. Human access is Founder-only by default. Exceptional access requires the Founder’s specific, purpose-bound and time-limited authorization or a binding legal requirement, and must be recorded without copying Gmail content into governance evidence.

Retention

Gmail-derived operational records are retained only while necessary for the active Founder feature and its governed synchronization, audit, freshness, reconciliation and rollback duties. Expired transient signals are excluded from priority use. A broader retention purpose requires new approval.

Deletion and revocation

The Founder may disable the connector, revoke the Google OAuth grant and request deletion of connector-derived Gmail records. Governed deletion first fails closed, then stops the remote watch when available, revokes access, removes the encrypted token envelope and deletes derived records under a separately approved and evidenced procedure.

Incidents

On suspected unauthorized access or disclosure, the connector remains or is placed disabled; further access stops; affected credentials are rotated or revoked; non-secret diagnostic evidence is preserved; affected local data is assessed; and the Founder and any legally required party are notified. Tokens, authorization codes, client secrets, raw provider identities and Gmail content must never be placed in support or governance evidence.

Changes and expansion

Adding another mailbox, user, operator, remote host, third-party processor, cloud content store, public availability or materially different purpose requires a new privacy and Google-policy review before use.

Contact: https://www.icare-net.net/contactus