Privacy policy

Operator: Rudra Vashishtha. Contact: rudraturtle7@gmail.com.

What GChat Bridge does

GChat Bridge lets AI assistants you connect read and, with your explicit approval, write Google Chat messages on your behalf through Google's official APIs.

Data we access

• Your Google account identity (name, email address, account ID, Workspace domain) to sign you in.
• Google Chat data you authorize: spaces, memberships and messages you can see, and optionally your read state and organization directory. This data is fetched on demand when your AI assistant calls a tool and is passed to that assistant.

Data we store

• Your account profile (name, email, Google account ID, domain).
• Google OAuth tokens, encrypted with AES-256-GCM. They are never shared with AI apps or any third party.
• Records of AI apps you authorized and their (hashed) refresh tokens.
• Messages you ask to send or edit, encrypted, only until you approve, cancel or they expire (default 15 minutes); the content is erased when the request finishes.
• An activity log of operations (time, operation type, outcome, space or message identifiers). It does not contain message text or search terms. Kept for 90 days by default.

We do not store copies of your Google Chat conversations and do not build a search index of them.

How data is used and shared

• Google Chat data is used only to provide the features you request through your AI assistant. It is sent to the AI app that made the request, which processes it under its own terms and privacy policy.
• We do not sell data, use it for advertising, or use it to train or improve AI or machine-learning models.
• Humans at Rudra Vashishtha do not read your Google Chat data, except with your explicit consent for support, where necessary for security or abuse investigation, or to comply with law.

GChat Bridge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Security

Data is encrypted in transit (TLS) and sensitive data at rest. Access is scoped per user and checked on every request.

Your choices

• Disconnect Google accounts or AI apps at any time from your dashboard.
• Delete all your data from the data deletion page.
• Revoke access from Google directly at myaccount.google.com/permissions.

Changes

We will post changes on this page and update the effective date.