In short: SawUs Portal accesses information from a connected service, such as Google Nest, only after you authorize it through that service's own permission screen. We use that information only to provide the portal's features to you. We do not sell it and do not use it for advertising. You can revoke access at any time.
1. Who we are
SawUs Portal (“the portal,” “we,” “us”) is a web portal for accessing and managing connected services that authorized users choose to link. The portal is operated by [CONFIRM: operator's legal name].
This policy explains what information the portal accesses, how it is used, and the choices you have. It applies to the portal and to this website at sawus-portal.com.
2. Information we access
Information from your Google Account
When you connect your Google Account, Google shows you the specific permissions (called “scopes”) the portal is requesting. The portal requests only the following:
- [CONFIRM: list every OAuth scope the integration requests, e.g. the Smart Device Management scope for Nest, and whether basic profile scopes such as email or name are also requested]
Information from Google Nest
For the Nest devices and homes you choose to share during authorization, the portal may access:
- [CONFIRM: the exact Nest data the integration reads, e.g. device names and types, room/structure names, thermostat temperature, humidity, mode and set points, online status]
- [CONFIRM: whether any camera, doorbell, video, image, or event data is accessed. If none, replace this line with “The portal does not access camera, doorbell, video, or image data.”]
If the portal can send commands to your devices (for example, changing a thermostat setting), it does so only when an authorized user makes that request through the portal. [CONFIRM: whether the portal sends commands to devices, and whether any changes happen automatically or on a schedule]
Authorization tokens
When you grant access, Google issues the portal access credentials (tokens) so it can keep the connection working without asking you to sign in each time. These tokens are not your Google password; the portal never sees or stores your Google password.
Information you provide to us
If you contact us, we receive the information you include in your message, such as your name and email address.
[CONFIRM: whether users create a separate SawUs Portal account, and what account information (e.g. name, email, role) is collected]
Technical information
Like most websites, the services that host the portal and this website may automatically process basic technical information, such as IP address, browser type, and the time of a request, to deliver pages and protect against abuse. [CONFIRM: whether the portal or website uses any analytics, cookies, or tracking. This website itself sets no cookies and uses no analytics.]
3. How we use information
We use the information described above only to:
- provide the portal's features that you or another authorized user request, such as displaying the status of connected devices;
- maintain the connection to services you have authorized;
- respond to your questions and support requests;
- keep the portal secure, prevent misuse, and troubleshoot problems; and
- comply with legal obligations.
We do not sell personal information. We do not use information from connected services for advertising, and we do not use it to build profiles for marketing.
4. Google user data
SawUs Portal's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide and improve the user-facing features of the portal that are visible and prominent in the portal.
- We do not transfer Google user data to others except as necessary to provide or improve those features, to comply with applicable law, for security purposes, or as part of a merger, acquisition, or sale of assets with notice to users.
- We do not use or transfer Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
- We do not sell Google user data, and we do not use it to determine creditworthiness or for lending purposes.
- We do not allow humans to read Google user data unless we have your affirmative agreement for specific data, it is necessary for security purposes (such as investigating abuse), it is needed to comply with applicable law, or the data is aggregated and anonymized for internal operations.
- We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.
[CONFIRM: that the portal's actual practices meet every commitment in this section. Google reviews these statements, and they must be true.]
5. How information is shared
We share information only in these situations:
- Service providers that host or operate the portal on our behalf and may process information only to provide their services to us: [CONFIRM: list each provider that stores or processes portal data, e.g. Supabase (database/backend) and Cloudflare (website hosting)].
- Authorized users of the portal who have been given access to the connected account or devices. [CONFIRM: who can see connected Nest data inside the portal, e.g. staff of the operating business]
- Legal and safety reasons, when required by law or legal process, or when reasonably necessary to protect the rights, property, or safety of users or others.
- Business transfers, as part of a merger, acquisition, or sale of assets, with notice to affected users.
6. Storage and retention
We keep information only for as long as needed for the purposes described in this policy, unless a longer period is required by law.
- Authorization tokens are kept while your connection is active. [CONFIRM: what happens to stored tokens when access is revoked or the connection is removed, and how quickly]
- Device data: [CONFIRM: whether Nest data is stored at all, or only displayed in real time; if stored (e.g. history or logs), for how long]
- Where data is stored: [CONFIRM: where portal data is stored, e.g. the provider and region]
7. Security
We take steps intended to protect the information the portal handles from unauthorized access, loss, and misuse, and we limit access to people who need it to operate the portal. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
[CONFIRM: any specific safeguards you want to describe here, such as HTTPS everywhere, encryption of stored tokens, or role-based access. Only list measures that are actually in place.]
8. Your choices and rights
- Revoke Google access at any time from your Google Account's Third-party apps & services page. You can also manage Nest sharing from the Google Nest permissions settings for your account. Once access is revoked, the portal can no longer retrieve new data from your account.
- Request access or deletion. You can ask us for a copy of the information we hold about you, or ask us to delete it, by emailing va.stayawhile@gmail.com. We will respond within [CONFIRM: response time, e.g. 30 days], subject to any information we must keep by law.
- Other rights. Depending on where you live, you may have additional rights under local law, such as the right to correct information or to object to certain processing. Contact us to make a request.
9. Children
The portal is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. When we do, we will update the effective date above. If a change materially affects how we use information from connected services, we will provide notice and, where required, ask for your consent before applying the change to data we already hold.
11. Contact us
Questions or requests about this policy or your data: va.stayawhile@gmail.com
[CONFIRM: optional mailing address for privacy requests. Remove this line if not providing one.]