Privacy Policy

This Privacy Policy describes how Naru Labs("we", "our", or "the platform") collects, uses, and protects your information when you use our public website, admin tools, and related services.

This platform uses Google OAuth 2.0 to authenticate users and access the following Google services:

• Gmail API: Read, send, modify, and manage emails within the platform
• Google Calendar API: View, create, edit, and manage calendar events and appointments

All Google data accessed through this platform is handled with the following security measures:

• Private: Data is private to your authenticated Google account only
• Secure: Stored with industry-standard encryption (HTTPS/TLS)
• Not shared: Never sold, shared, or disclosed to third parties for marketing
• Access control: Only accessible when you are logged in with valid credentials
• Limited retention: Cached temporarily for performance and cleared on logout

We request the following Google OAuth permissions:

Data accessed through Google OAuth is used exclusively for:

• Displaying your emails and calendar events within the platform dashboard
• Enabling you to manage Gmail messages (read, send, delete)
• Allowing you to view and manage Google Calendar appointments
• Providing synchronized access to your Google services in one place

You have full control over your data and can:

• Revoke access: Disconnect your Google account via Google Account Permissions
• Disconnect: Use the platform's disconnect button to remove access tokens
• Request deletion: Contact us to request deletion of stored data
• View scopes: Review requested permissions before authorizing
• Opt out: Do not connect your Google account if you do not want OAuth features

OAuth tokens and cached data are stored in your browser's local storage and on our secure servers. Data is automatically cleared when you:

• Click "Disconnect" in the platform
• Revoke access via Google Account settings
• Clear your browser data or cookies

Refresh tokens are stored securely and expire according to Google's policies (typically after 6 months of inactivity).

This platform uses the following third-party services:

• Google APIs: OAuth authentication and data access
• Vercel: Hosting and deployment
• MongoDB: Platform data storage (not Google OAuth content)
• Resend: Transactional email for contact and newsletter confirmations

We implement the following security measures:

• HTTPS/TLS encryption for all data transmission
• Secure token storage with encryption
• OAuth 2.0 industry-standard authentication
• Regular security audits and updates
• No storage of Google passwords (handled by Google)

This platform uses browser local storage and cookies to store:

• Google OAuth access and refresh tokens
• User preferences and theme settings
• Cached data for improved performance

You can clear this data at any time through your browser settings or by using the platform's disconnect feature.

When you subscribe to our newsletter or submit the contact form, we collect:

• Email address and message content you provide
• Optional metadata such as page URL, referrer, timezone, and device type

We use this information to respond to inquiries, send confirmation emails, and manage newsletter subscriptions. You may unsubscribe from the newsletter at any time.

This platform is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last Updated" date at the bottom of this page.

For privacy concerns, questions, or data deletion requests, please contact:

This application complies with the Google API Services User Data Policy, including the Limited Use requirements.

See also our Terms of Service.