Adom Privacy Policy

@@ -0,0 +1,94 @@+# Adom Privacy Policy++**Effective date: July 18, 2026**++This Privacy Policy explains how Adom Industries ("Adom", "we", "us") handles information when you+use Adom software that connects to your accounts on your behalf. It covers:++- **adom-google** and the **Adom Google Connector** (the hosted OAuth client that lets your AI+  agent drive your Google Workspace or personal Google account),+- the **Adom Native Browser Extension** ("abe") that drives your own web browser, and+- the **Adom OAuth token-broker gateway** that these products use to obtain access tokens.++We built these tools to act **only** on the instructions you give your AI agent. This policy+describes what that means for your data.++## Who we are++Adom Industries. Questions, requests, or complaints: **[email protected]**.++## What data we access, and why++We access data **only to carry out the actions you ask your agent to perform**, and only for the+scopes you approve on Google's consent screen (or, for abe, the browser you connect).++- **Google account data (via OAuth):** depending on the permissions you grant, this can include+  Gmail (read, compose, send), Google Drive files, Google Docs/Sheets/Slides, Google Calendar,+  Google Contacts, Google Tasks, and Google Chat. We request the scopes needed for the features you+  use. You see and approve every scope on Google's own consent screen before anything is accessed.+- **Adom Native Browser Extension (abe):** operates your own signed-in browser locally to perform+  the automation you request. It acts within the browser session already running on your device.+- **Operational data:** the OAuth gateway logs minimal, non-content connection metadata (for+  example a truncated session identifier and timestamps) to route sign-ins and diagnose errors. It+  does **not** log the contents of your Gmail, Drive, Calendar, or other account data.++## How we use it++- To perform the specific tasks you direct your agent to do (for example, read an email you asked+  about, create a document, or add a calendar event).+- To maintain and secure the service.++We do **not**:++- sell your data,+- use it for advertising or build advertising profiles,+- use your Google user data to train generalized AI/ML models, or+- transfer it to third parties except as needed to provide the feature you requested or as required+  by law.++## Google API Limited Use++Adom's use and transfer to any other app of information received from Google APIs will adhere to the+[Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy),+including the **Limited Use** requirements.++## How your data is stored and secured++Adom is designed so that **your account data stays with you**, not on Adom's servers:++- **Access happens on your own machine or container.** After you authorize, your OAuth **refresh+  token is stored locally on your device/container** with owner-only file permissions (`0600`), not+  on Adom's servers.+- **The OAuth client secret lives only on the Adom gateway** (broker mode) and is never shipped to+  your device or embedded in any installed package. The gateway exchanges authorization codes and+  refresh tokens for short-lived access tokens on demand; it does not retain your account content.+- **Access tokens are short-lived** and are used only for the request you initiated.+- The content of your Gmail, Drive, Calendar, Contacts, and other Google data is **not stored on+  Adom servers**; it flows to your agent to complete the task you asked for.++## Sharing and third parties++We share data with **Google** (the API provider) as necessary to fulfil your requests, under+Google's terms. We do not sell data and do not share it with advertising networks.++## Retention and deletion++- Your refresh token persists locally until you revoke access or delete it.+- You can **revoke Adom's access at any time** from your Google Account's+  [third-party access page](https://myaccount.google.com/permissions), and delete the local token+  from your device/container. Revoking access ends our ability to act on your behalf.+- Minimal gateway connection logs are retained only for operations and security and contain no+  account content.++## Children++These tools are intended for professional and general audiences and are not directed to children+under 13.++## Changes to this policy++We may update this policy. Material changes will be posted here with a new effective date.++## Contact++Adom Industries — **[email protected]**