Google Privacy Notice (Gmail & Google Drive)

Who we are

JMS Cloud is a cloud-based business management system for joinery and manufacturing businesses. In this notice, “we”, “our”, and “us” refer to JMS Cloud.

Google API access & scopes we request

When you connect a Google account, Google shows an OAuth consent screen describing the permissions (scopes) requested. JMS Cloud requests the following scopes to provide Drive and Gmail functionality:

Google Drive

• https://www.googleapis.com/auth/drive — access to files and folders in Google Drive as needed to support Drive features in JMS Cloud.
• https://www.googleapis.com/auth/drive.file — access to files created or opened with JMS Cloud, to support working with Drive files from within the app.

Gmail

• https://www.googleapis.com/auth/gmail.readonly — read Gmail messages and metadata (e.g., subject, sender, recipients, dates) to display emails within JMS Cloud.
• https://www.googleapis.com/auth/gmail.modify — modify messages (e.g., mark as read/unread, apply/remove labels) when you use those features in JMS Cloud.
• https://www.googleapis.com/auth/gmail.send — send email messages from within JMS Cloud using your connected Gmail account.

We only use these scopes to provide the features you use inside JMS Cloud. We do not use Gmail or Drive data for advertising, profiling, or selling data.

What Google data we access

Gmail data

Depending on features you use, JMS Cloud may access:

• Email metadata (e.g., From, To, Cc, Subject, Date, labels).
• Email content (plain text and/or HTML body) so you can view messages within JMS Cloud.
• Email attachments when you open a message or download an attachment from JMS Cloud.
• Message state changes you request (e.g., marking a message as read, applying labels).
• Outgoing messages you send from within JMS Cloud.

Google Drive data

Depending on features you use, JMS Cloud may access:

• Drive file metadata (e.g., file name, type, size, and folder location).
• Drive file content when you open, preview, upload, download, or manage files via JMS Cloud features.
• Files created or opened by JMS Cloud where applicable.

How we use Google data

We use Google data only to provide and operate the JMS Cloud features you request, including:

• Showing your Gmail folders/labels and messages inside JMS Cloud.
• Searching and viewing messages relating to your contacts and records (as directed by you).
• Sending emails (and drafts, if you choose) from JMS Cloud.
• Marking messages as read/unread and applying labels when you use those functions.
• Working with files in Google Drive that you choose to manage via JMS Cloud (upload, download, preview, organise, or attach to records).

What we do not do

• We do not sell Gmail or Google Drive user data.
• We do not use Google user data for advertising or marketing targeting.
• We do not allow third parties to use Google user data for their own purposes.
• We do not access your Google data unless you connect your account and you use the related features.

Storage, retention, and deletion

JMS Cloud may store certain email or file information inside JMS Cloud when necessary to provide core features (for example, linking an email to a contact or keeping a record of an outbound email event).

• Access tokens: stored securely to maintain the connection until you disconnect or revoke access.
• Email/message data: may be stored as business records when you choose to associate messages with contacts/events within JMS Cloud.
• Attachments: retrieved from Gmail/Drive when you request them; we store them only as required by the feature you use (e.g., saving to a record if you choose).

You can request deletion of your JMS Cloud data by contacting us (see “Contact”). You can also revoke Google access (see next section), which stops all further Google API access.

Your choices and how to revoke access

You can stop JMS Cloud from accessing your Google account at any time by:

• Disconnecting the Google integration within JMS Cloud (if available in your account settings), and/or
• Revoking access from your Google Account:
  • Go to Google Account → Security → Third-party access (or Third-party apps with account access)
  • Find “JMS Cloud” and choose Remove Access

If you revoke access, JMS Cloud will no longer be able to read or send emails or access Drive on your behalf. Previously stored business records within JMS Cloud (if any) remain subject to your account’s retention and deletion settings.

Security

We use reasonable technical and organisational measures designed to protect data, including:

• HTTPS encryption in transit.
• OAuth 2.0 for Google authorisation; we do not ask for or store your Google password.
• Access controls to limit who within your organisation can view connected email records.
• Multi-tenant isolation and permission controls within JMS Cloud.

Compliance with Google policies

JMS Cloud’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

See Google’s policy here: Google API Services User Data Policy .

Changes to this notice

We may update this notice from time to time. Any updates will be posted on this page with a revised effective date.