To ensure transparency, the following explanation is provided regarding the permissions and data
usage of the Gmail API used by the CleanCraft application:

To ensure transparency, the following explanation is provided regarding the permissions and data usage of the Gmail API used by the CleanCraft application:

1. Scope of Permissions and Usage;
  1. Basic Metadata Access (gmail.readonly)
   - Purpose: Identify emails that need to be processed
   - Accessed Content:
    - Email subject, sender/recipient addresses
    - Timestamps, label status
    - Email size and unique identifiers
   - Technical Limitations:
    - Does not parse email body or attachment content
    - Does not access unrelated contact information

  2. Email Management Permissions (gmail.modify)
   - Purpose: Execute user-defined cleanup operations
   - Operation Types:
    - Archive/delete emails that meet the criteria
    - Mark emails as read
    - Move emails to specified labels

2. Data Processing and Security Measures
  1. Data Flow
   - All requests are routed through the official Google API gateway
   - Data is temporarily processed in the user's device memory
   - Local cache is cleared immediately after processing

  2. Privacy Protection Mechanisms
   - Content Isolation:
    - Uses Google API's metadata filtering technology to physically isolate access to body content
   - Operation Auditing:
    - Logs all API calls (only includes operation type and timestamp)

  3. User Rights Protection
   - Users can revoke access at any time through [Google Account Permissions Settings](https://myaccount.google.com/permissions)
   - Supports exporting complete operation records (including time, operation type, affected email IDs)

3. Compliance Commitment
  1. Principle of Least Privilege
   - Only requests the minimum permissions necessary for functionality
   - Denies access to non-essential data (such as email body, account security information)

  2. Third-Party Audits
   - Undergoes independent security team penetration testing annually

;  3. Legal Compliance
   - Complies with GDPR Article 5(1)(b) (purpose limitation principle)
   - Meets CCPA Section 1798.100(b) (data usage disclosure requirements)

This statement is effective as of July 10, 2025.

Collapse Details

Show Details