Google API data and user controls

What connecting Google enables

HyoNova Email is a user-facing business mail client. You choose Connect Google and approve access to identify your account and read, organize, compose and send Gmail messages. The requested scopes are openid, email, profile and https://www.googleapis.com/auth/gmail.modify. We do not request access to your Drive, Calendar or Contacts through this Gmail connection. The gmail.modify scope is needed for organizing messages as well as drafting/sending; read-only or send-only scopes cannot provide the combined client features.

Data access and storage

The connection handles your account identity, message metadata, labels, message content and attachments as needed for the selected mail features. Metadata is synchronized; bodies and received attachments are retrieved on demand. Locally composed drafts and sending uploads are stored for that action. OAuth credentials stay in the server-side secret store. Google Cloud Pub/Sub delivers authenticated change notifications used to schedule synchronization.

Limited Use and optional AI

HyoNova’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this information, use it for advertisements or train generalized AI models with it. Serene receives selected email context through the configured AI service only when you request an assistance action; it does not independently send replies. The privacy policy explains authorized transfers, human access limits, security, retention and your rights.

Disconnect or remove access

In HyoNova Email, open the connected mailbox settings and choose Disconnect. For an organization mailbox, use an authorized mailbox administrator. HyoNova removes connection secrets and the active local mail cache/drafts/sending uploads and attempts to stop provider notifications and revoke the Google grant. Your original Gmail messages stay in Google. You can independently remove HyoNova access at https://myaccount.google.com/connections. Revocation prevents future authorized API calls but does not automatically erase legally retained logs or all backup copies. Contact us for a data-deletion request if you cannot access your HyoNova account.

Google API Services User Data Policy