This Privacy Policy describes how Hal Carrell (“we”, “us”) collects and uses information when you use the website gam-gui.com, the GAM & Google Workspace Companion macOS application (“App”), and related services.
1. Summary
- The App runs primarily on your Mac. Google Workspace data is accessed through GAM and Google APIs using credentials you configure—not through our servers by default.
- We do not sell your personal information.
- Optional features (license validation, updates, Google sign-in for Marketplace, optional AI Assistant with your own API key) may contact services described below.
2. Information we collect
2.1 Website (gam-gui.com)
Our static site and admin portal may use standard web logs from your hosting provider (IP address, browser type, pages visited). The setup checklist on /app/ stores progress in your browser’s local storage only; we do not receive it.
2.2 Desktop application
- License keys you enter for validation (may be sent to our license API or payment partners).
- Google OAuth tokens when you choose “Authenticate with Google” (Marketplace flow): validated with Google; stored locally on your device for licensing state and optional Sheets upload.
- Usage counters for workflow limits (stored locally and/or on license servers as configured).
- Optional AI API keys you enter (Bring Your Own Key): stored locally on your Mac only; never sent to our servers.
- Crash or diagnostic logs only if you enable such features in a future build (currently minimized).
2.3 Google Workspace / GAM data
Commands and workflows execute locally via GAM against your domain. Output files (CSV, logs) are written to directories you choose on your Mac.
Google Sheets upload can work in two ways (you choose in Configuration):
- Service account (optional): You provide a JSON key; uploads go directly from your Mac to Google.
- Google sign-in OAuth (Marketplace flow): When you authenticate with Google in the app, we may use your OAuth token to create new spreadsheets and write workflow CSV data using the Google Sheets API (
spreadsheets) and Google Drive API (drive.file— files the app creates or that you open with the app).
We do not upload your Workspace directory data to our servers.
3. How we use information
- Provide, license, and update the App
- Validate purchases and prevent license abuse
- Respond to support requests
- Comply with law and enforce our Terms
4. Google API Services User Data Policy
If you connect a Google account, our use of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements.
4.1 Scopes we request (Google sign-in)
When you choose Authenticate with Google / Sign in with Google, the app requests:
- userinfo.email — Identify your account for Marketplace licensing and support
- userinfo.profile — Display your name in the app UI
- spreadsheets — Create and write new spreadsheets from Premium Workflow CSV exports (optional upload)
- drive.file — Create and write spreadsheet files in your Google Drive that this app creates (or that you open with this app). We do not request full Drive access.
Google may include openid automatically with Sign in with Google. It is used only to establish who signed in.
We do not request Google Workspace Admin SDK scopes (admin.directory.*, admin.reports.*, etc.).
Administrative directory data is accessed locally by GAM under your separate GAM authorization—not by this app's Google sign-in.
4.2 How we use Google user data
- Limited Use: We use Google user data only to provide the features above (licensing, optional Sheets upload, UI display).
- No sale: We do not sell Google user data.
- No transfer for AI/ML training: We do not transfer Google Workspace API user data (including Sheets/Drive content obtained via Google sign-in) to any third-party AI/ML service for model training or secondary purposes. See §5 (AI Assistant).
- Storage: OAuth tokens and any Google API responses used for Sheets upload are stored locally on your Mac. We do not store Google user data on our servers except as needed for license validation (email address only, when applicable).
- No human reading: We do not use Google user data for advertising or unrelated profiling.
4.3 Retention and deletion of Google user data
| Data | Where stored | Retention | How you delete it |
|---|---|---|---|
| Google OAuth access/refresh tokens | Locally on your Mac (app data / ~/Documents/GAM7 Reports) |
Until you sign out, revoke access, or delete the local token files | Sign out in the App; delete local token files; and/or revoke at Google Account → Third-party access |
| Spreadsheets created by the App | Your Google Drive (your account) | Controlled by you in Google Drive | Delete the files in Google Drive; revoke app access to stop further creates |
| Email used for license validation | Our license/payment systems (when you purchase or activate) | As long as needed for billing, license enforcement, fraud prevention, and legal obligations | Email stormer72@icloud.com to request deletion of license-related personal data (we may retain records required for tax/accounting) |
| Workflow CSV/log outputs | Your Mac (folders you choose) | Until you delete them | Delete the files on your Mac |
After you revoke Google access, the App can no longer call Google APIs with your account. Cached tokens on your Mac should be removed by signing out or deleting the local token files.
4.4 Data protection mechanisms
- Local-first design: Workspace admin operations run on your Mac via GAM; we do not operate a cloud proxy that stores your directory data.
- Least-privilege OAuth: Google sign-in uses
spreadsheets+drive.file(per-file) rather than full Drive. - Local token storage: OAuth tokens are stored on your device with restricted file permissions where the OS allows; tokens are not returned to the website frontend.
- Encrypted transport: API calls to Google, license, and payment providers use HTTPS/TLS.
- No sale / Limited Use: Google user data is not sold or used for advertising.
- Access control: Only you (on your Mac) and systems you authorize (Google, your payment provider) process the relevant data.
No method of transmission or storage is 100% secure. You are responsible for physical and account security on your Mac and Google account.
4.5 Revoking access
You can revoke the app's Google access at Google Account → Third-party access or sign out in the app.
5. Optional AI Assistant (Bring Your Own Key)
The App’s AI Assistant is optional and uses Bring Your Own Key (BYOK):
- Providers you may choose: Anthropic (Claude) and OpenAI (GPT). You supply your own API key and are billed by that provider. We do not sell or mediate AI plans.
- What is sent: Only content you choose to submit in the Assistant (for example natural-language requests or GAM command text you ask to explain). Processing occurs via the provider’s API using your key from your Mac.
- What is not sent: We do not send Google Workspace API user data obtained through Google sign-in (including Sheets or Drive file contents from our OAuth flow) to Anthropic, OpenAI, or any other AI provider. We do not use Google user data to train AI/ML models.
- Keys: Your AI API keys stay on your device; we do not receive them.
- Provider training policies: You should review Anthropic’s and OpenAI’s terms for your account tier. Our App does not opt Google user data into any provider training pipeline.
We do not operate a self-hosted or offline AI model that processes Google user data on our infrastructure.
6. Sharing
We may share information with:
- Payment processors (e.g. Lemon Squeezy, Gumroad) when you purchase a license
- Google when you use OAuth or Google APIs
- AI providers (Anthropic / OpenAI) only when you use the optional AI Assistant with your own key, and only for the prompts you submit (not Google OAuth Workspace data)
- Hosting providers for the website or update downloads (e.g. GitHub Releases)
- Authorities when required by law
7. Retention & security (general)
License records are retained as needed for billing and support. Local App data remains on your device until you delete it. See §4.3–4.4 for Google-specific retention, deletion, and protection. We use reasonable safeguards; no method is 100% secure.
8. Your rights
Depending on your location (including EEA/UK/California), you may have rights to access, correct, delete, or restrict processing of personal data. Contact us at stormer72@icloud.com (privacy and support) to exercise deletion or access requests.
9. Children
The App is for business administrators and is not directed to children under 16.
10. Changes
We may update this policy; the “Last updated” date will change. Continued use constitutes acceptance.
11. Contact
Hal Carrell
Email: stormer72@icloud.com