Privacy Policy
This policy describes the personal Hotel Daily Revenue reporting application and this public information website.
1. Data processed
The application processes spreadsheet reports supplied by its owner, generated report summaries and HTML attachments, configured sender and recipient addresses, OAuth authorization tokens, and sending results such as message IDs. It does not request Gmail inbox-reading permissions.
2. Purpose and Gmail permissions
The application uses the Gmail API's gmail.send permission to send owner-configured reports and messages. Google authentication and token refresh are used solely to support this authorized sending function.
3. Storage and retention
Report sources, archives, configuration, and authorization credentials are stored on the owner's computer. Credentials and tokens are stored in a local folder with restricted Windows permissions. Reports remain in local archives until the owner removes them. Gmail may retain sent messages and attachments under the account's settings and Google's policies. Recipients may retain received messages independently.
4. Data sharing
Email content, attachments, recipient addresses, and authorization information needed for API requests are transmitted to Google to deliver messages. Messages are delivered to the recipients specified by the owner. The configured network proxy may process connection metadata. This information website is hosted by Cloudflare, which may process access logs and network metadata to serve and protect the site.
The reporting application uploads a password-encrypted copy of the latest HTML report to a separate Cloudflare Pages site. Report content is decrypted in the viewers browser after they enter the viewing password. The viewing password is not uploaded. Cloudflare can retain encrypted deployment versions until the owner deletes them; changing the viewing password does not revoke old copies already downloaded.
The reporting application does not sell Google user data, use it for advertising, or use it to train general-purpose AI models. The website does not include advertising, analytics scripts, or application forms.
5. Google API Limited Use
Hotel Daily Revenue's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. Revocation and deletion
The account owner can revoke the application's access through Google Account connections. Local authorization files and report archives can be deleted by the owner. Revoking access does not delete messages already sent; those must be managed in Gmail and, where applicable, by their recipients.
7. Contact
For questions about this application or requests concerning its locally stored data, contact the application owner using the support email displayed on the Google OAuth consent screen.
中文摘要
本工具仅申请 Gmail 发信权限，不申请读取收件箱。报表和授权文件保存在使用者本机；发送邮件时，邮件内容及附件会交由 Google 投递，并由指定收件人接收。可在 Google 账号连接设置中撤销授权；本地归档和已发送邮件需分别管理和删除。