Google Workspace Limited Use

Limited Use Compliance Statement

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Raw, aggregated, anonymized, or derived Google Workspace user data is not transferred to third-party AI/ML services and is not used to create, train, or improve foundational or generalized machine learning or artificial intelligence models.

OpenStockAI does not access Google Photos APIs or Google Photos user data.

DeepSeek data segregation

OpenStockAI chose complete, auditable isolation rather than removing the separate analysis feature. Google API user data and DeepSeek never share a request path.

DeepSeek is retained only as a separate analysis feature that uses user-provided, non-Google-API data. Google user data obtained via any Google API — including Google Calendar events, OAuth tokens, and the email collected for Calendar connect — is never sent to, or used by, the DeepSeek API.

If a model request destined for DeepSeek contains Google API user-data markers, OpenStockAI rejects the request before any HTTP call to api.deepseek.com.

• -Feature A — Google Calendar: optional Workspace connect for import, export, display, and in-app alerts. This flow does not call DeepSeek, OpenAI, Gemini, or Tavily.
• -Feature B — chat and portfolio analysis: uses only user-typed questions and user-entered holdings. DeepSeek may receive this user-provided data. It does not read Calendar tokens, imported events, or Calendar-connect email.
• -Technical controls: Calendar API routes cannot import DeepSeek or other AI clients; agent code cannot read user_calendar_events, google_import, or Calendar tokens; DeepSeek rejects any payload that still contains Google API user-data markers before the HTTP call.

Workspace data this app uses

• -Optional Google Calendar connect uses calendar.events.owned and userinfo.email.
• -Imported event titles, descriptions, dates, and encrypted OAuth tokens are stored only to show, import, export, or notify about the user's own calendar.
• -Google Sign-In through Supabase is identity authentication. It does not grant Gmail, Drive, Docs, or Photos access.
• -Public YouTube search and public economic-calendar research are not Google Workspace or Photos user data.
• -Holdings-related disclosures, news, and public economic-calendar items continue to appear in the app. Users can still export those in-app events to Google Calendar. Isolation applies only to Google Calendar user events and tokens, not to public market information.

Third-party AI integrations

These providers receive user questions and user-entered portfolio or research context when the user asks for analysis. They do not receive Google Calendar events, tokens, emails collected for Calendar connect, or any Photos data. DeepSeek is listed because it is a separate analysis feature; that listing is not a transfer of Google API user data.

표는 좌우로 넘겨 전체 내용을 확인할 수 있어요.

한국어 안내

Google Calendar에서 받은 개인 일정과 토큰은 캘린더 표시, 가져오기/내보내기, 앱 알림에만 씁니다. 채팅·리서치 AI 학습 재료로는 쓰지 않아요. DeepSeek는 사용자가 직접 입력한 질문과 보유종목 맥락만 보는 별도 기능이에요. Google API에서 받은 데이터가 DeepSeek 요청에 섞이면 api.deepseek.com 호출 전에 막아요. 보유 종목 공시·뉴스, 공개 경제 일정은 플랫폼에 그대로 반영되고, 그 일정을 Google Calendar로 내보내는 기능도 유지해요. OpenAI 요청은 store=false로 프롬프트를 학습용으로 저장하지 않아요. Google Photos API는 사용하지 않아요.

같은 내용은 개인정보 처리방침 제16조에도 있어요.