Privacy policy

Last updated: 17 October 2026. This policy describes the personal-use Personal Command Center dashboard operated by Jayan Subramanian at dashboard.jayan-s.dev.

Data accessed and why

When you connect Google, the dashboard requests your basic profile information (including your name, email address, and profile picture), read-only Gmail access, and offline access. Profile information identifies your signed-in account. Offline access permits token renewal while your authorization remains valid.

The Gmail permission grants read-only access to your mailbox. The current dashboard uses that permission to list inbox conversations by category and retrieve conversation identifiers, sender and subject headers, dates, short text previews, and unread status. It displays these summaries and links to the conversations in Gmail. It does not send, edit, or delete email.

Google account and Gmail data are used to provide sign-in and the inbox view. The dashboard does not sell Google user data, use it for advertising, or use it to train AI models.

Requests pass between Google, the server hosting this dashboard, and your browser to operate these features. The dashboard does not intentionally transfer Gmail data to Todoist or Home Assistant. Those integrations operate separately, and Todoist content is loaded from Todoist in an embedded view.

Personal Command Center's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Storage and retention

The application stores sign-in session data, including OAuth credentials, in encrypted session cookies. The server uses the session credentials to request data from Google. The browser receives the session information needed by the dashboard, including a short-lived access token, and displays inbox data.

The dashboard does not implement a database or permanent archive for email messages or inbox summaries. Inbox results are processed by the application server and held in the page while displayed. Browser caching and hosting infrastructure may retain data according to their configuration.

Operational and error logs may contain request or diagnostic information. Their retention is controlled by the hosting environment. Session cookies remain until they expire, you sign out, or you clear the site's data in your browser.

Disconnecting and deleting data

You can revoke the dashboard's Google authorization at any time from Google Account connections. Revocation prevents further authorized access once existing access tokens are invalidated or expire.

Signing out removes the application's sign-in session cookies. Close the dashboard and clear its browser site data to remove locally retained site data. Revoking access or signing out does not delete email from your Gmail account.

Contact subramanianjayan@gmail.com to request deletion of any retained application data or diagnostic records associated with you, subject to any applicable retention obligations.

Other services and protection

Google, Todoist, and the hosting provider operate their own services under their respective privacy policies. Home Assistant connections use the configured Home Assistant server. Google authorization does not authorize access to those separate accounts.

The application uses Google OAuth rather than collecting your Google password. Google client secrets and Home Assistant credentials are configured on the server. Protection of the deployed server, its environment, and its logs is the responsibility of the dashboard operator.

Updates and contact