Privacy Policy
How taohq collects, uses, stores, shares and deletes your data, including Google user data.
This Privacy Policy explains how TheAlphaOnes ("TheAlphaOnes", "we", "us") collects, uses, stores, shares, and deletes information when you use the website at taohq.org and the applications we operate under it, including taohq.org sign-in, Bubbles.space, Bubbles.mail, and TAO-Identity (together, the "Services").
"taohq.org" is the application name shown on the Google sign-in consent screen. This policy applies to that application and to every Service that uses it.
By using the Services you agree to the practices described here. If you do not agree, please do not use the Services.
We collect only the information needed to provide and secure the Services:
- Account information: your name, email address, and profile picture, received from Google when you choose "Sign in with Google".
- Content you provide: messages you send us by email, and data you create inside a Service (for example notes or workspace content).
- Google user data you explicitly authorise: for example, Gmail message data if you connect a Gmail account to Bubbles.mail. See section 02.
- Technical data: IP address, browser type, device type, pages visited, and error logs, collected automatically to operate, secure, and debug the Services.
We do not collect payment card details, government identifiers, or precise location.
When you sign in with Google or connect a Google account, you see a Google consent screen listing exactly what we request. We only access the data you approve there.
Data we access:
- Basic profile (scopes: openid, email, profile): your Google account ID, name, email address, and profile picture. Used only to create your account, sign you in, and display your name and picture inside the Services.
- Gmail data (only if you connect Gmail to Bubbles.mail): message headers, content, and labels of the account you connect. Used only to provide the features you see in Bubbles.mail, such as summarising your inbox, prioritising messages, and helping you reply or organise mail.
How we use it: Google user data is used only to provide and improve the user-facing features of the Service you are using. We do not use it for advertising, we do not sell it, and we do not use it to determine credit-worthiness or for lending purposes.
Human access: our staff do not read your Google user data unless you give us explicit permission for a specific message (for example, in a support request), it is necessary for security purposes such as investigating abuse, or it is required to comply with applicable law.
Artificial intelligence: some features process your data with AI models in order to produce results shown to you. We do not use Google user data to develop, improve, or train generalised or non-personalised AI or machine learning models, and our AI providers are contractually prohibited from doing so.
Sharing: we transfer Google user data to third parties only as needed to provide the Services (see section 04), to comply with law, or as part of a merger or acquisition with your prior consent.
Limited Use: the use and transfer of information received from Google APIs by taohq.org to any other app will adhere to the Google API Services User Data Policy(opens in a new tab), including the Limited Use requirements.
- To create and manage your account and authenticate you.
- To provide, maintain, and improve the features you use.
- To keep the Services secure, prevent fraud and abuse, and debug errors.
- To respond to your support requests and send essential service messages (we do not send marketing email without your consent).
- To comply with legal obligations.
Data is stored on infrastructure operated by the providers listed above and may be processed in countries other than your own, including India and the United States.
- All data is encrypted in transit using TLS (HTTPS).
- Data and OAuth tokens are encrypted at rest.
- Access to production systems is restricted to authorised personnel and protected by multi-factor authentication.
No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information and will notify affected users of a breach as required by law.
We keep your information only for as long as your account is active or as needed to provide the Services. Server logs are deleted automatically within 30 days.
You can delete your data at any time:
- Email taohq.org@gmail.com from the address linked to your account and ask us to delete it. We will delete your account and associated data, including any Google user data, within 30 days and confirm by email.
- Revoke our access to your Google account at any time at myaccount.google.com/permissions(opens in a new tab). Once revoked, we stop accessing your Google data and delete stored Google tokens.
We may retain limited records where the law requires it, for example to resolve disputes or meet legal obligations.
Depending on where you live (including under the GDPR, UK GDPR, the California Consumer Privacy Act, and India's Digital Personal Data Protection Act 2023), you may have the right to access, correct, delete, or export your personal data, to withdraw consent, and to object to or restrict certain processing.
To exercise any of these rights, email taohq.org@gmail.com. We respond within 30 days. You may also lodge a complaint with your local data protection authority.
The Services are not directed to children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.
We may update this policy from time to time. We will post the updated version on this page and change the "Last updated" date. If changes are material, we will notify signed-in users by email or within the Services before they take effect.
TheAlphaOnes, India. For any privacy question or request, email taohq.org@gmail.com.