Privacy Policy — BesticLab
BesticLab ("the App") is a private, single-user automation tool operated at besticlab.com ("we", "us", "our"). It is not offered to the public and has no users other than its owner. This policy explains what data the App accesses and how that data is handled.
1. What the App accesses
With the owner's explicit authorisation, the App connects to the owner's own Google Account and may access:
- Gmail — read, search, draft and send messages (inbox triage, daily briefings, replies the owner asks for)
- Google Calendar — read and create events
- Google Drive — read and upload files (encrypted backups of the owner's self-hosted services)
- Google Contacts (read-only) — look up names and addresses the owner asks about
- Google Sheets and Google Docs — read and edit documents the owner requests
The App never accesses any Google account other than the owner's.
2. How the data is used
Data is used solely to carry out tasks the owner requests — for example summarising unread email, generating a daily briefing, uploading a backup, or editing one of the owner's documents. There is no advertising, profiling, or resale.
3. Sharing and third parties
- Data is not sold, rented or shared with third parties for marketing or any other purpose.
- To generate summaries or drafts, message content may be processed by third-party AI language-model APIs on the owner's instruction.
- Google APIs are used only to perform the requested actions on the owner's account.
- No person other than the owner has access to the data.
4. Storage and retention
- OAuth credentials are stored on the owner's private server, protected by key-only SSH and a private network.
- Copies of processed data are retained only as long as needed for the task and are deleted on request. Original content remains in the owner's Google Account, which the owner controls.
5. Security
The server is hardened: key-only SSH authentication, fail2ban, TLS for all remote access, and services bound to a private network rather than exposed to the public internet.
6. Your choices and revoking access
Access can be revoked at any time at myaccount.google.com/permissions. To request deletion of any data held by the App, use the contact address below.
7. Children and changes
The App is not directed at children and collects no data from anyone other than its owner. Material changes to this policy will be posted on this page with a new "last updated" date.