Wees OpenAI Alerts Privacy

Wees Express uses the Gmail API permission https://www.googleapis.com/auth/gmail.send to send owner-facing operational notices. The authorized business sender and recipient addresses are used for message routing. The utility receives a send result and message identifier from Google; it does not retrieve inbox messages, contacts, attachments, or mailbox contents.

Alert content is limited to service name, severity, alert type, timestamp, aggregate count, relevant HTTP status class, and recommended operator action. Alerts exclude customer contact details, customer identifiers, payment information, raw webhook bodies, raw attribution references, checkout tokens, IP addresses, and user agents. Google API data is not used for ad targeting, customer profiling, sale, or AI-model training.

Google processes the notices through Gmail. The unattended sender is intended to operate within the existing Cloudflare infrastructure. Setup and controlled delivery testing currently use an encrypted owner-operated sender; continuous alert dispatch has not been activated. Authorization credentials are encrypted and accessible only to the authorized operator and the server-side sender. They are not included in website code, public logs, or alert messages. Human access is limited to authorized operation, troubleshooting, and security needs.

Operational counters are retained for 30 days. Private operational audit and alert records are retained for seven days. Gmail copies remain subject to the business mailbox owner's retention choices. Authorization credentials are retained only while needed for the sender and are removed from the sender when revoked or replaced.

The owner can revoke this application's access in Google Account connections or request removal through weesexpress@gmail.com. Revocation stops future use of that grant. Our handling of Google API data follows the Google API Services User Data Policy, including its Limited Use requirements.