Privacy Policy

What this tool is

The Red Key Dashboard is an internal operations tool used by Red Key Digital (a web development business based in Perth, Australia). It is not a public product. Only authorised staff can sign in. It helps the team triage email, prepare daily briefings, track client work, and manage invoices.

Who operates it

Red Key Digital, Perth, Western Australia. Contact: jack@redkey.digital.

What Google data we access

When a Red Key team member authorises this app against their Google account, we request the following OAuth scopes:

• gmail.readonly to read inbox messages for email triage and daily briefings
• gmail.send to send replies drafted and approved by the team member
• gmail.modify to apply labels and mark messages as read after triage
• calendar.readonly to show today's events in the daily briefing

How we use that data

Email metadata and content is classified into categories (urgent, needs reply, client lead, bill, calendar, FYI, spam) to help the team prioritise work. Classification summaries and draft replies are stored in the dashboard's own database so the team can review and act on them. Calendar event summaries are shown in briefings but not stored long term. We do not use Google user data to train any machine learning models and we do not share or sell it to third parties.

Where data lives

The dashboard is hosted on Vercel. Structured data (triage records, briefing snapshots, audit logs) is stored in a PostgreSQL database hosted on Neon, in the Sydney region. Access to the database is restricted to authorised Red Key staff. We do not copy raw Gmail message bodies into the database; only category, summary, and draft reply text are persisted.

Retention

Triage records and briefing snapshots are retained for operational use and may be deleted at any time on request. OAuth refresh tokens are stored as environment variables on Vercel and can be revoked by the user at any time via Google Account permissions.

Revoking access

A user can revoke this app's access to their Google account at any time by visiting https://myaccount.google.com/permissions and removing the “Red Key Dashboard” entry. Revoking access immediately stops the dashboard from reading Gmail or Calendar data for that account.

Changes to this policy

If we change what data we access or how we use it, we will update this page and the “Last updated” date above.