Privacy policy

Effective October 20, 2026. This policy describes Humserver Property Mail, a private email importer operated for its owner's property records.

Information accessed and stored

When authorized, the importer reads mailbox messages matching configured property and vendor searches. Processing may include message subject, sender, received date, body text, amounts, message identifiers and source links. Relevant excerpts and source references may be stored in the private ledger for review. The importer does not extract information from attachment contents. Some providers deliver attachments as part of a complete message; these are not retained as files. Message identifiers are retained to avoid repeat imports.

Purpose and use

Data is used only to identify and review possible property payments, payouts and expenses, organize the owner's records and prevent duplicate imports. Candidate messages are not automatically treated as confirmed payments. Mail content is not used to train AI models, advertise, sell information or determine creditworthiness.

Access and sharing

Imported data is stored on the owner's Humserver hosting infrastructure and its PostgreSQL database. Access is restricted through the private Toolbox sign-in and network controls. The hosting provider processes infrastructure data as necessary to operate the server. Data is not sold or shared for marketing. This integration's fixed importer does not send email content to an AI service.

Credentials and controls

OAuth access and refresh credentials are stored separately from application source with restricted filesystem permissions. Connections use HTTPS to the mail provider. The Google connection requests read-only Gmail access and can be revoked through Google Account security settings. Revocation prevents future access but does not automatically erase records already imported.

Retention and deletion

The owner retains imported ledger records and deduplication identifiers until they are removed through server maintenance. Archived records and ledger change history may remain in the database. The owner can request deletion through the support contact shown on the consent screen. Nightly database backups are retained for approximately 14 days; deleted records can remain in those backups until they expire. Authorization credentials may need to be renewed if revoked or expired.

Google API data

Humserver Property Mail's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Contact and updates

Contact the support email listed on the Google consent screen for access, correction, deletion or privacy questions. Changes to this policy will be published on this page with a revised effective date.