Privacy policy

Effective November 2, 2026. This policy describes the intended data handling of OSSUS Substack Books, a personal-use application under development. Gmail import is not currently enabled.

Access and purpose

When authorized and enabled, the application will use Gmail’s read-only API permission to retrieve selected newsletter chapters for the owner’s private reading library. Google’s permission technically permits reading mailbox messages and settings; the application is intended to process only explicitly configured newsletter senders and book mappings. It does not request permission to send, modify, or delete email.

Private storage and retention

OAuth credentials are kept in the owner-controlled secret store. Imported chapter text, books, and processing state will be kept in the owner’s private infrastructure and its configured backups. This public website does not display mailbox contents, email addresses, or credentials.

The owner controls deletion of imported material and backup retention. Revoking Google access prevents future authorized API access; it does not automatically delete previously saved books or backup copies.

Use and sharing

Google API data is handled under Google’s API Services User Data Policy and its Limited Use requirements. The application will not sell Google user data or use it for advertising or general-purpose AI model training.

Google processes authorization and API requests. The website’s hosting provider processes basic request information needed to deliver and protect these static pages. These pages contain no advertising, analytics scripts, tracking pixels, or application-set cookies.

Control and support

The owner can revoke authorization through Google Account connections and stop the private job. For questions, use the support address shown on Google’s consent screen. Other users are not invited to connect mailboxes to this personal application.