Privacy policy

Information accessed

The owner authorizes Gmail’s read-only permission. This permission can read mailbox data; SiteKeep uses configured search and date filters to select relevant messages. It verifies the connected mailbox and reads message identifiers, headers such as sender, subject and date, message content, original email files and attachments for selected imports.

Purpose and storage

Selected email is used to organize commercial real estate correspondence and documents for the owner’s review. Imported text, metadata and review status are stored in Cloudflare D1. Original email files and attachments are stored in a private Cloudflare R2 bucket. OAuth credentials are stored as Cloudflare Worker secrets. The Gmail intake uses read-only API calls and does not send, delete, archive or modify messages in the source mailbox.

Access and service providers

The private application restricts access to the owner through Cloudflare Access and server-side identity checks. Google provides the mailbox and authorization services. Cloudflare provides hosting, authentication and storage. The public information site has no connection to the private application’s database, email credentials or stored files. It does not display imported email or property records.

SiteKeep does not sell Gmail data, use it for advertising, or use it to train generalized AI or machine-learning models. The Gmail intake does not send message content to an external AI service. The owner may separately choose to share or export information through tools they authorize.

Retention and controls

Imported copies are retained in the owner’s workspace until removed by the owner or through an owner-authorized maintenance action. There is currently no automatic retention deadline. Revoking Google authorization stops future API access but does not automatically remove previously imported copies. The owner can revoke SiteKeep’s Google access in their Google Account permissions and can request removal of stored copies through the contact below. Staging is currently read-only, so removal may require an authorized maintenance action.

Public website and security

These public pages use no analytics scripts, advertising or forms. Hosting providers may process technical request information, such as IP address, to deliver and protect the site. Access controls and private storage reduce exposure, but no system can guarantee absolute security.

Google API data

SiteKeep’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

For privacy questions or data-removal requests, contact the owner at meherisharjun@gmail.com. This policy should be updated if the app’s data practices change.