Privacy policy
Effective: 30 October 2026 · HAL Dashboard · hal-console.com
HAL Dashboard is a privately operated personal operations application. This policy describes the Gmail integration and this public information website. The application is intended for use by its operator and personally authorized users; it is not offered as a general public email service.
1. Google data accessed
When an authorized user connects Gmail, HAL requests the Gmail read-only permission (https://www.googleapis.com/auth/gmail.readonly). That scope permits reading Gmail messages, labels and associated metadata, but does not authorize sending, modifying, deleting or labeling messages.
2. How Gmail data is used
The currently tested Mail integration uses selected Gmail labels to identify and retrieve matching messages for the user's private dashboard. Message information may include sender, subject, timestamps, label information and message content to the extent needed by the authorized feature. The purpose is to help the authorized user review and organize their own information. The Gmail permission is not used to make changes to the mailbox.
3. Storage and access
OAuth authorization credentials are kept in restricted storage on the operator-managed application server, separately from this informational website. Gmail data is retrieved by the private backend and may be held temporarily in application memory or in locally maintained application records needed for the feature. The operator controls access to the private deployment and can remove local credentials and associated local application records. Revoking HAL's access in Google Account permissions prevents further authorized Gmail API access.
4. Sharing, advertising and disclosure
HAL's Gmail connection is intended to provide the features requested by the authorized user. Gmail information is not published on this public website, sold, or used to target advertisements. Google data is not made available to unrelated third parties through the public site. If future integrations need to transmit Gmail information to external processors, their operation and applicable disclosures must be reviewed and this policy updated before those features are enabled.
5. Retention and deletion
OAuth credentials may be retained by the private deployment until replaced, removed or revoked. Retrieved information may remain in local application records or caches until removed by the operator. A user can revoke Gmail access through their Google Account connections and request deletion of retained local application data from the HAL operator through the app's support contact shown during authorization.
6. This public website
This website consists of static informational pages. It does not contain a Gmail sign-in flow, collect Gmail messages, or set HAL-specific tracking cookies. Its hosting provider, Cloudflare, may process normal web requests and related technical information to deliver the pages.
7. Changes and contact
This policy will be updated if the application's use of Google user data materially changes. Questions about HAL's privacy practices can be directed to the application operator using the support contact shown on HAL Dashboard's Google authorization screen.
Scope of this policy: It describes the current privately managed Gmail read-only integration and public information site. Future features, including mailbox modifications or external AI processing, require separate implementation, authorization and privacy review.