Privacy Policy for G-Deck
Google API Services User Data Policy Compliance Statement:
G-Deck's use and transfer to any other app of information received from Google APIs adheres to the
Google API Services User Data Policy,
including the Limited Use requirements.
App Defense Alliance (ADA) CASA Standards Compliance:
G-Deck is engineered and validated in accordance with the App Defense Alliance (ADA) Cloud Application Security Assessment (CASA) requirements (OWASP ASVS / CASA AL1 Tier 2 baseline). We enforce strict technical and organizational controls to protect sensitive and restricted user data at all stages of processing.
1. Overview & Purpose of G-Deck
G-Deck (https://gdeck.org) is an executive productivity command center and workspace aggregator built for Google Workspace. G-Deck allows users to manage their emails, calendar schedules, tasks, video conferences, and cloud files through a unified, high-efficiency interface.
G-Deck operates strictly on a privacy-first, client-orchestrated model. Your privacy, confidentiality, and data sovereignty are fundamental to our architecture.
2. Data Protection Mechanisms for Sensitive & Restricted Data
In accordance with Google OAuth Verification requirements and CASA data protection standards, G-Deck maintains comprehensive technical, administrative, and physical safeguards for all sensitive and restricted Google Workspace data:
2.1. Cryptographic Protection & Encryption in Transit
- Mandatory TLS 1.2 / TLS 1.3 Encryption: All communications between the user's browser, G-Deck, and Google's authenticated API endpoints are strictly encrypted in transit using Transport Layer Security (TLS 1.2 or TLS 1.3) with modern cryptographic cipher suites (e.g., ECDHE-RSA-AES128-GCM-SHA256, ECDHE-ECDSA-AES256-GCM-SHA384).
- Strict Transport Security (HSTS): We enforce HTTP Strict Transport Security (HSTS) to prevent SSL-stripping, protocol downgrade attacks, and man-in-the-middle (MITM) interceptions.
- Direct-to-Google Communication: API requests for sensitive workspace data (including Gmail messages, Google Drive documents, Calendar events, and Tasks) travel directly from the user's browser runtime to official Google API endpoints (googleapis.com), ensuring end-to-end transport integrity.
2.2. Zero-Persistence Architecture & Protection at Rest
- Zero Server Storage of Sensitive Content: G-Deck employs a strict Zero-Persistence Architecture for user content. We do NOT operate intermediate databases, shadow caches, or persistent file stores that capture, mirror, index, or retain your emails, file contents, contacts, calendar agendas, or task lists.
- Ephemeral In-Memory Processing: Sensitive Google Workspace data retrieved via APIs is held solely in volatile client memory (RAM) for the instantaneous duration required to render the user interface. When the user navigates away, refreshes the page, signs out, or closes the browser tab, all transient data representations are immediately and irreversibly purged from memory.
- No Server-Side Stored Credentials: G-Deck does not store user passwords, Google account credentials, or long-term private keys.
2.3. OAuth 2.0 Token Protection & Storage Controls
- Short-Lived Bearer Tokens: G-Deck utilizes standard Google Identity Services (GIS) OAuth 2.0 token flows. Tokens have a strictly bounded time-to-live (typically 3,600 seconds / 1 hour) enforced by Google's authorization servers.
- Isolated Client-Side Scope: Authentication tokens are maintained strictly within sandboxed, client-side browser application memory. Tokens are never transmitted to unauthorized third-party domains, tracking scripts, or external analytics services.
- Immediate Token Invalidation on Sign-Out: Selecting "Sign Out" or utilizing the in-app "Delete Account & Wipe Data" feature immediately discards the active OAuth token and purges any localized session metadata.
2.4. Access Control, Least Privilege & Human-in-the-Loop Safeguards
- Principle of Least Privilege: G-Deck requests only the minimum granular scopes required to power explicit, user-demanded features. Scopes are not requested speculatively.
- Strict Human-in-the-Loop AI Approvals: Any write, send, delete, or modify actions (such as sending an email via Gmail, booking a new Calendar meeting, or modifying a Task) executed via our AI assistant (G-Pilot) require explicit, manual confirmation from the user in the UI before execution. The AI cannot autonomously modify or transmit sensitive user data without approval.
- No Human Inspection of User Data: No G-Deck employee, contractor, developer, or automated vendor has access to, or reads, your personal Google Workspace data, emails, documents, or calendars under any circumstance.
2.5. Vulnerability Management & ADA CASA Security Verification
- Annual CASA AL1 (Tier 2) Assessment: G-Deck conducts annual Cloud Application Security Assessments (CASA) through App Defense Alliance (ADA) authorized laboratories to validate adherence to OWASP ASVS and CASA security requirements.
- Automated Dependency Auditing: All software dependencies and npm libraries are continuously scanned for known vulnerabilities (CVEs) and maintained on secure, patched releases.
- Content Security Policy (CSP): Modern browser security headers, cross-origin resource sharing (CORS) protections, and frame-busting policies are applied to guard against cross-site scripting (XSS) and clickjacking.
3. AI / ML Model Training Privacy Policy Disclosure (Google Workspace APIs)
Affirmative Disclosure on AI/ML Model Training:
Google Workspace API user data accessed by G-Deck (including emails, calendar events, documents, contacts, and tasks) is NOT used to develop, train, fine-tune, or improve generalized Artificial Intelligence (AI) and/or Machine Learning (ML) models, including large language models (LLMs) and foundation models.
G-Deck incorporates optional productivity AI assistance (G-Pilot) powered by Google's enterprise-grade Gemini API:
- Data transmitted in connection with G-Pilot prompts is processed statelessly and strictly in real-time to answer specific user queries (e.g., summarizing an unread email or checking schedule availability).
- No prompt inputs, API results, or workspace snippets are logged, retained, or ingested into public training sets.
4. Specific Google Workspace Scopes & Purpose Specification
G-Deck requests access to the following Google API scopes for the explicit purposes described below:
| Google API Scope |
Classification |
Explicit Feature & Purpose |
https://mail.google.com/
gmail.readonly, gmail.send, gmail.modify |
Restricted |
Enables users to view inbox messages, search emails, read threads, and compose/send emails directly within the unified G-Deck command center. |
https://www.googleapis.com/auth/drive
drive.readonly, drive.file |
Restricted |
Allows users to browse, search, preview, and organize documents, spreadsheets, and files stored in their personal Google Drive. |
https://www.googleapis.com/auth/calendar
calendar.events |
Sensitive |
Enables users to view upcoming appointments, check daily agendas, resolve meeting conflicts, and schedule new calendar events. |
https://www.googleapis.com/auth/contacts.readonly
contacts |
Sensitive |
Enables quick contact autocompletion when composing emails and creating meeting attendee invitations. |
| https://www.googleapis.com/auth/tasks |
Sensitive |
Allows users to track pending action items, create to-do lists, and synchronize task completion states with Google Tasks. |
| https://www.googleapis.com/auth/meetings.space.created |
Sensitive |
Enables instant generation of secure Google Meet video conference links directly from the chat and calendar interfaces. |
| openid, userinfo.email, userinfo.profile |
Non-Sensitive |
Authenticates your session and displays your active account name, profile avatar, and email address in the user status banner. |
5. Limited Use & Prohibition on Third-Party Data Transfers
We enforce strict prohibitions regarding your Google user data:
- No Selling or Commercial Monetization: We will never sell, rent, lease, or monetize your Google Workspace user data or personal data to any third party for any purpose.
- No Advertising Use: We do not use or transfer your Google user data to serve targeted advertisements, retargeting campaigns, or interest-based marketing.
- No Data Transfers: We do not transfer your Google user data to third parties, except in the narrow circumstances required by applicable law, or as part of a formal corporate restructuring (with prior notice).
- No Data Brokerage: We never share data with data brokers or information aggregation services.
6. Data Retention, Deletion & User Revocation Controls
G-Deck provides complete user autonomy over authentication tokens and personal data:
- Zero Server Retention: Because no sensitive Google Workspace content is retained on G-Deck servers, there is no remote data retention period. Data exists ephemerally only in active client sessions.
- Local Data Wipe: Users can click "Delete Account & Wipe Data" inside the in-app Security Center or sign out to instantly clear all localized browser cache, preferences, and authentication tokens.
- Revoking Access in Google Security Settings: Users may immediately revoke G-Deck's access to their Google account at any time by visiting:
https://myaccount.google.com/permissions
Upon revocation, G-Deck's tokens become immediately void and all API access is permanently severed.
7. Security Incident Response & Breach Notification
G-Deck maintains a comprehensive Incident Response Policy. In the unlikely event of any suspected or confirmed security incident or unauthorized access affecting user authentication tokens or communications:
- Our engineering team will initiate immediate containment and mitigation protocols within four (4) hours.
- We will notify affected users and Google's Trust & Safety / OAuth Verification teams via email within seventy-two (72) hours of confirming a reportable breach, providing details of the incident and recommended remediation actions.
8. Children's Online Privacy Protection (COPPA)
G-Deck is an executive productivity tool intended for business, educational, and personal adult use. We do not knowingly collect, solicit, or process personal data from children under the age of 13. If you believe a minor has accessed the application without parental consent, please contact us for immediate token severance.
9. Updates to This Privacy Policy
We may periodically update this Privacy Policy to reflect technical enhancements, architectural updates, or regulatory compliance standards. Whenever revisions are made, the "Last Updated" date at the top of this document will be updated accordingly. Continued use of G-Deck after any updates constitutes your acceptance of the revised terms.
10. Developer Contact & Security Point of Contact
If you have any questions, security disclosures, CASA compliance inquiries, or privacy-related requests, please contact our designated Data Protection & Security Lead: