Privacy policy
Private operations need explicit boundaries.
This policy explains how Parcel Operations handles information for the owner-only Parcel Daily Briefing.
Effective August 25, 2026
1. Scope and operator
Parcel Operations is a private business operations service used only by its owner. It supports the Parcel Daily Briefing and is not a public, multi-user product. The public overview and this policy do not expose any mailbox, calendar, guest, property, cleaner, task, financial, or credential data.
2. Google data the service accesses
The owner has approved exactly three Google accounts: one personal Google account and two owner-approved Google Workspace accounts. Parcel Operations accesses only data that the owner authorizes through Google's consent screen.
Gmail
The service reads message and thread metadata and content needed to identify important email, deadlines, reply needs, bank alerts, and matching receipts for the daily briefing.
Google Calendar
The service reads visible calendar lists and event details needed to assemble the owner's schedule and display property operations in Pacific time.
3. Exact Google actions
Gmail access is read first and draft only. When the private briefing workflow identifies an email that needs a reply, Parcel Operations may create a reply draft in that Gmail account for the owner to review. It does not send email, delete or archive messages, mark messages as spam, unsubscribe, or create mailbox rules.
Google Calendar access is read-only. Parcel Operations does not create, move, modify, or delete calendar events.
4. Other connected sources
Turno
The service reads cleaning project coverage and problem status needed for turnover operations. Turno credentials stay in the private hosting environment, and the connector does not make Turno changes.
iCloud Calendar
The service reads events only from the calendars the owner explicitly allows. It uses a dedicated app-specific password and does not create, change, or delete iCloud events.
5. How data is used and shared
Connected data is used only to prepare the owner's private daily briefing, identify items needing attention, and prepare owner-reviewed Gmail drafts. The service returns only the information needed for those purposes to the owner's private ChatGPT workflow.
Parcel Operations does not sell personal information, serve advertising, build advertising profiles, or share connected data with data brokers. It does not use or permit Google user data to train generalized artificial intelligence or machine learning models.
Data may be disclosed only to service providers that host or operate the private workflow, when required to protect the service or comply with law, or when the owner directs the disclosure.
6. Storage and retention
Google OAuth credentials, the iCloud app-specific password, Turno credentials, and connector authorization records are stored as restricted secrets or private records in the hosting environment. They are retained only while the associated connection remains enabled or as needed to complete a verified deletion request.
Parcel Operations processes Gmail content, calendar events, and Turno or iCloud operational results in memory for the active request. It does not intentionally store those source records in its own searchable database after the request completes. Operational logs are designed to exclude message content, event content, access tokens, passwords, and source credentials.
Gmail drafts created by the service remain in Gmail until the owner edits, sends, or deletes them. Generated briefing output is retained by the destination service according to the owner's settings and that service's terms.
7. Security
Parcel Operations uses encrypted transport, server-side secrets, narrow source access, owner-only connector authorization, short-lived connector access tokens, and output reduction to protect connected data. No internet transmission or storage system can be guaranteed perfectly secure.
8. Google API Services User Data Policy
Parcel Operations' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
9. Revocation and deletion
The owner can revoke Google access at any time from the third-party connections page in the Google Account security settings. Revocation makes the affected Google tokens unusable. The owner can also disable the Turno or iCloud connection by removing its private credential.
To request deletion of retained connection credentials or connector-specific records, email hello@theparcelco.com. Verified deletion requests are completed within 30 days, except where limited retention is required for security or legal compliance.
10. Policy changes and contact
This page will be updated when the service's data practices materially change. Questions, access concerns, revocation help, and deletion requests can be sent to hello@theparcelco.com.