Privacy notice
Last updated: 25 October 2026
This notice describes the personal, locally operated GSM Project Hub application managed by Andrew Gibbs.
Data accessed
After the operator grants Google OAuth consent, the app uses Gmail read-only access to obtain the account email address, message identifiers and metadata, message bodies, original MIME messages and attachments for matching project emails. Gmail read-only is an account-wide permission. The application limits imports through its configured sender and project search.
Purpose
Imported data is used to preserve evidence, identify duplicates, extract project information, prepare proposed permit follow-up actions, daily-report records and delivery updates, and support human review and an audit trail. It is not used to serve advertising, build advertising profiles, sell data or train general-purpose AI models.
Local AI processing
Email text, extracted attachment text and selected document images may be sent to the operator's LM Studio model through a local API on the same PC. This integration does not send that content to a cloud AI inference service. The model receives no Gmail credentials, database access or tools. Its suggestions require human verification.
Storage and access
Original messages, attachments, extracted proposals, source hashes and review history are stored in the operator's local Windows data folder and operator-controlled backups. Windows permissions restrict those folders. Google refresh tokens and the LM Studio API token are stored using Windows DPAPI encryption. The local hub requires authentication. The operator and Windows administrators with sufficient machine access can access the underlying data.
LM Studio and Windows security tools may retain local processing or security logs. The operator is responsible for the PC's account security, encryption, updates, backups and any separately configured remote access. This public information site contains no imported mailbox data, project evidence or account credentials.
Sharing and Google API data
This app does not automatically publish imported data or share it with external recipients. The operator may choose to export records, download evidence, configure a backup destination or give authorized people access to the local hub; those choices are controlled separately by the operator.
Google API data is used for the app's disclosed email-import, evidence-processing and review features. Its use and transfer must comply with the Google API Services User Data Policy, including the Limited Use requirements.
Retention, revocation and deletion
Evidence and audit records are retained until the operator removes them under the applicable project retention arrangements. Revoking Google access stops future authorized imports but does not delete evidence already copied to the PC or its backups. To delete stored data, the operator must remove the relevant local data and backup copies. The present application does not provide an automatic deletion or retention scheduler.
Google access can be revoked through the Google Account connections page. The application can also be stopped or uninstalled on the PC. Contact the operator about access or deletion requests.
This information website
These public app-information pages are served from the operator's Windows PC at hub-info.daddylikey.net. They use no application analytics or tracking scripts. The web server may retain ordinary request information, such as IP addresses, requested URLs and access times, to operate and secure the site. Access logs rotate at 10 MiB with a maximum of 14 retained rotated files and a 14-day rotated-log age setting. Imported Gmail evidence is held separately by the private local application and is not served by this information website.
Contact and updates
Contact Andrew Gibbs at bigandy1111111111@gmail.com about this notice. Material changes in data use should be reflected here before the changed processing starts.