Privacy policy

Paperless Contacts Import is operated by Alex Usov for his personally controlled Google accounts and private document archive.

Google data access and use

Google permissions allow read access to Gmail and saved Contacts. The importer reads the current scan contact group and its member email addresses, checks eligible incoming email metadata, and reads qualifying messages to authenticate the sender and extract supported attachments. It imports only email received after activation. Gmail messages and Contacts are not modified or deleted.

Storage and service providers

Google refresh credentials are stored in private files on the operator’s computer during setup and on the private import server. The importer keeps a private processing ledger with operational message identifiers, sender membership, processing state and document checksums. Original attachments and searchable OCR text are retained in the operator’s private Paperless archive. Message bodies and raw MIME are processed in memory rather than saved in the importer ledger.

Google supplies the mailbox and Contacts APIs. OVHcloud hosts the import server and private archive. Axiom receives bounded technical diagnostics such as category, operation, release and safe error class; document content, email addresses, filenames and message bodies are excluded. Cloudflare serves these public information pages and processes ordinary connection data to deliver and protect them. These pages contain no analytics scripts or forms and do not receive mailbox credentials or documents.

Sharing and limited use

Google user data is used to provide this owner-requested document import function. It is not sold, used for advertising, or supplied for training a general-purpose AI model. The use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Retention and controls

Imported documents and private processing records remain until the operator removes them through the relevant private system. Revoking this app’s Google access prevents further authorized access when its tokens are invalidated; it does not remove copies already imported. The account owner can revoke access in Google Account’s third-party connections settings and can manage imported documents in the private archive. Technical diagnostics follow the configured Axiom retention period.

For questions or a request about access, retained documents or processing records, contact alex@sapicture.day.

Effective date: October 11, 2026.