# Adom Privacy Policy

**Effective date: July 18, 2026**

This Privacy Policy explains how Adom Industries ("Adom", "we", "us") handles information when you
use Adom software that connects to your accounts on your behalf. It covers:

- **adom-google** and the **Adom Google Connector** (the hosted OAuth client that lets your AI
  agent drive your Google Workspace or personal Google account),
- the **Adom Native Browser Extension** ("abe") that drives your own web browser, and
- the **Adom OAuth token-broker gateway** that these products use to obtain access tokens.

We built these tools to act **only** on the instructions you give your AI agent. This policy
describes what that means for your data.

## Who we are

Adom Industries. Questions, requests, or complaints: **support@adom.inc**.

## What data we access, and why

We access data **only to carry out the actions you ask your agent to perform**, and only for the
scopes you approve on Google's consent screen (or, for abe, the browser you connect).

- **Google account data (via OAuth):** depending on the permissions you grant, this can include
  Gmail (read, compose, send), Google Drive files, Google Docs/Sheets/Slides, Google Calendar,
  Google Contacts, Google Tasks, and Google Chat. We request the scopes needed for the features you
  use. You see and approve every scope on Google's own consent screen before anything is accessed.
- **Adom Native Browser Extension (abe):** operates your own signed-in browser locally to perform
  the automation you request. It acts within the browser session already running on your device.
- **Operational data:** the OAuth gateway logs minimal, non-content connection metadata (for
  example a truncated session identifier and timestamps) to route sign-ins and diagnose errors. It
  does **not** log the contents of your Gmail, Drive, Calendar, or other account data.

## How we use it

- To perform the specific tasks you direct your agent to do (for example, read an email you asked
  about, create a document, or add a calendar event).
- To maintain and secure the service.

We do **not**:

- sell your data,
- use it for advertising or build advertising profiles,
- use your Google user data to train generalized AI/ML models, or
- transfer it to third parties except as needed to provide the feature you requested or as required
  by law.

## Google API Limited Use

Adom's use and transfer to any other app of information received from Google APIs will adhere to the
[Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy),
including the **Limited Use** requirements.

## How your data is stored and secured

Adom is designed so that **your account data stays with you**, not on Adom's servers:

- **Access happens on your own machine or container.** After you authorize, your OAuth **refresh
  token is stored locally on your device/container** with owner-only file permissions (`0600`), not
  on Adom's servers.
- **The OAuth client secret lives only on the Adom gateway** (broker mode) and is never shipped to
  your device or embedded in any installed package. The gateway exchanges authorization codes and
  refresh tokens for short-lived access tokens on demand; it does not retain your account content.
- **Access tokens are short-lived** and are used only for the request you initiated.
- The content of your Gmail, Drive, Calendar, Contacts, and other Google data is **not stored on
  Adom servers**; it flows to your agent to complete the task you asked for.

## Sharing and third parties

We share data with **Google** (the API provider) as necessary to fulfil your requests, under
Google's terms. We do not sell data and do not share it with advertising networks.

## Retention and deletion

- Your refresh token persists locally until you revoke access or delete it.
- You can **revoke Adom's access at any time** from your Google Account's
  [third-party access page](https://myaccount.google.com/permissions), and delete the local token
  from your device/container. Revoking access ends our ability to act on your behalf.
- Minimal gateway connection logs are retained only for operations and security and contain no
  account content.

## Children

These tools are intended for professional and general audiences and are not directed to children
under 13.

## Changes to this policy

We may update this policy. Material changes will be posted here with a new effective date.

## Contact

Adom Industries — **support@adom.inc**