SI Office Privacy Policy

Effective October 21, 2026

SI Office is Studio Hyperset's private office application, operated by Quimby Melton. It helps manage email attention, business opportunities, operational tasks, client projects, deliverables, time records, and AI processing costs. This policy explains how SI Office handles connected Google account data and other information used in those features.

Information we access

For Google accounts the operator connects, SI Office uses Gmail APIs to read message and thread identifiers, sender and recipient addresses, subjects, dates, snippets, message text or HTML, labels, and mailbox history identifiers. Gmail message responses can include attachment metadata; the email triage feature does not download attachment contents. SI Office also processes OAuth access and refresh tokens needed to maintain the authorized connection.

Other office features store information supplied by authorized users, including business contacts, opportunity and commercial details, notes, tasks, project chat messages, uploaded files, generated deliverables, and linked My Hours project and time-entry identifiers. Hosting services may process request metadata, such as IP addresses and technical error logs, to operate and protect the service.

How Google data is used

• Email attention: inspect eligible incoming mail, classify messages that need attention, and add the operator's important-emails label. An independent check can add job-updates to application and hiring correspondence.
• Operator feedback: use examples labeled ai-include or ai-ignore as context for subsequent importance decisions.
• Business development: read selected LinkedIn and Jobright job-alert emails to extract job links, titles, companies, and limited discovery context for the opportunity review queue.
• Reliability: retain processing checkpoints and decision records to avoid duplicate work and investigate errors.

The automated email manager adds labels; it does not send replies, delete mail, remove labels, or change Gmail filters. Connecting Gmail does not grant other users public access to the mailbox. AI decisions can be incorrect and remain subject to the operator's review.

AI processing and service providers

SI Office sends selected message headers, snippets, message text, and limited operator-selected feedback examples to the OpenAI API to provide email classification. Job details extracted from alert emails may be processed by OpenAI to evaluate business opportunities. Project chats and files are also sent to OpenAI when needed to perform requested project work. Requests may therefore contain personal or confidential information present in the supplied content.

Google provides the connected mailbox and authorization services. Cloudflare hosts SI Office and its application storage. OpenAI provides model processing and, for requested project work, research and file-generation tools. My Hours receives designated project, task, duration, date, and service-description information for authorized time recording; email triage does not send mailbox contents to My Hours. These providers process information as needed for those functions under their applicable service terms and data-handling policies.

SI Office does not sell Google user data, use it for advertising or credit decisions, or use Google Workspace API data to develop, improve, or train generalized or non-personalized AI or machine-learning models. Feedback examples are request context, not model training. Email classification requests use the OpenAI API with response storage disabled; this does not imply zero provider retention of operational or abuse-monitoring data.

SI Office's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Transfers are limited to providing or improving the requested features, security purposes, legal obligations, or other transfers permitted by that policy. Human access to Google user data is limited to the account owner's use and the consented, security, legal, or other exceptions allowed by that policy.

Storage and retention

Cloudflare stores application records and secrets. Email triage does not maintain a full mailbox archive: message content is fetched for processing, while its decision receipts retain identifiers, classification, rationale, model, label outcome, and timestamps. Email decision and intake-checkpoint records have a 14-day expiry, which can be renewed by processing. Trimmed feedback examples are cached in application memory for reuse, with a 30-minute freshness limit; cached entries can remain until replacement, eviction, or instance shutdown.

System-health summaries retain run times, outcome codes, counts, and the last successful run for up to 30 days after their latest update; they contain no email bodies or credentials. Extracted job leads, opportunity records, operational records, project chats, files, deliverables, time receipts, and accounting records have separate business purposes and may persist until removed by the operator; they do not share the email audit expiry. Technical logs and provider-side records follow the relevant provider's retention settings and policies. Disconnecting Google stops future authorized access but does not itself erase already saved application records or remove Gmail labels.

Security and access

SI Office uses HTTPS for browser and provider connections, Cloudflare-managed storage protections, platform secret storage for credentials, and application authentication for private office data. Access is restricted by the application's principal, read-only, and assistant permissions. Public homepage and privacy pages do not expose email content or credentials. Authorized browsers may retain office credentials in local storage until the operator locks or clears them. No security measure eliminates every risk.

Your choices and deletion requests

You can revoke SI Office's Google access through your Google Account connections. The operator can also pause automation or remove the stored connection credentials. Revocation can require a new authorization before processing resumes.

To request access to, correction of, or deletion of information held by SI Office, contact quimby@studiohyperset.com. Identify the account or records concerned; do not send passwords or tokens. Requests are handled by the operator after identity and authority are confirmed. Records needed for legitimate contractual, accounting, security, or legal obligations may be retained, and provider backups or logs can remain subject to their normal retention. Deleting SI Office records does not delete the original messages in Gmail.

Policy changes and contact

Material changes to Google data use will be disclosed in this policy and through an appropriate in-product notice or renewed consent before the new use begins. For privacy questions, contact Quimby Melton at quimby@studiohyperset.com.