ROYAL POP LOCAL

Privacy information

Purpose and operator

Martijn Hoffmans uses Royal Pop Local to manage his personal collecting correspondence. Contact: martijnhoffmans@gmail.com.

Google data accessed

The owner connects his own Gmail account using Google's consent screen. The application requests gmail.readonly and gmail.compose. These permissions can provide broad access to Gmail messages and composing/sending functions. The application limits its use to identifying the authorized sender, finding prior correspondence with intended recipients, matching relevant conversations, processing their replies and sending separately authorized messages. It does not download unrelated message bodies for campaign processing. Reading metadata to determine whether a message is relevant may precede that filtering.

Data stored and used

The private local database stores professional contact information, relevant correspondence, draft messages, approvals, send records, reply classifications and minimal records of objections to prevent further contact. Google tokens are protected for the Windows user using Windows DPAPI. The SQLite database itself is not represented as encrypted by the application.

Service providers and sharing

Google processes messages and account authorization as part of Gmail. When separately enabled and authorized by the owner, OpenAI Codex processes limited task inputs, such as relevant reply text, for classification or drafting. The application does not send its entire contact list, unrelated mailbox contents or Google credentials to a model. Model proposals do not authorize sending or purchases. Data handling by these service providers also depends on their applicable terms and account settings. The application does not sell Google user data or use it for advertising or model training.

Retention

The application has a 90-day cleanup for matched incoming message bodies and selected derived text, plus a 30-day log-retention routine. These routines do not erase every copy: sent/draft messages, operational records, Gmail copies and rotating local backups may remain. The owner manages project records, backups and account data separately. Minimal suppression records may be retained to avoid contacting someone who has objected.

Public information website

These information pages are hosted by Cloudflare. Cloudflare processes network requests, which can include IP addresses and technical request information, to serve and protect the website. These pages contain no application login, forms, advertising or analytics scripts added by Royal Pop Local. The local contact database and mailbox are not hosted on this website.

Control and deletion

The owner can pause or stop outgoing messages in the local dashboard and can remove the local Gmail connection. Google access can be revoked in the connected Google account. Revoking access does not itself erase already stored local data or Gmail messages. Contact the operator to request correction, deletion or no further correspondence.

Google Limited Use

The use of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google API Services User Data Policy