JamBau Oy

Privacy Policy

How JamBau Oy handles and protects data across our websites, software services and Google API integrations.

Last updated: October 31, 2026

This Privacy Policy explains how JamBau Oy collects, uses, stores and protects information on its websites (www.jambau.biz and www.jambau.fi), in client communications, and across software tools and integrations developed or operated by JamBau Oy (including Google OAuth and Gmail API integrations).

1. Data Controller and Contact

2. Information We Collect and Purpose of Processing

We only process data necessary for communication, service delivery, information security and legal obligations:

  • Inquiries and client relationships: When you contact us by email or engage us for a project, we process your name, email address, organisation and message content to respond to your inquiry and to prepare and deliver agreed services.
  • Website analytics: Our websites use cookie-free Plausible Analytics. It does not use cookies, does not collect personal data, and does not track visitors across websites or devices.
  • Application and integration data: Software products and tools operated by JamBau Oy process only authentication, authorisation and operational logs required to provide the service.

3. Google User Data and Google API Integrations (Google OAuth & Gmail API)

Internal and client-authorized automation and accounting tools developed by JamBau Oy (such as JamBau Gmail MCP) may use Google OAuth 2.0 authentication and Google Workspace / Gmail APIs with the explicit consent of the user.

Data Accessed (Scopes)

When authorized by the user, the application requests read-only access (https://www.googleapis.com/auth/gmail.readonly) to search and read email messages, message metadata and attachments in the authorized Gmail account. The application does not modify, delete or send emails.

How Google User Data Is Used

Read-only access is used strictly to perform user-initiated searches and reconciliation tasks, such as locating supplier invoices, payment receipts and order confirmations for accounting and bookkeeping documentation.

Data Storage and Protection

  • OAuth credentials (refresh token and access token) are stored locally in the operating system’s encrypted credential store (such as macOS Keychain).
  • Retrieved email metadata and receipt attachments are processed locally in the user’s own workspace and are not uploaded to external third-party servers unless explicitly directed by the user.

Data Sharing, Transfers and AI Models

  • JamBau Oy does not sell, rent or trade Google user data to third parties.
  • Google user data is never used for advertising, profiling or marketing.
  • Data obtained through Google Workspace and Gmail APIs is never used to train generalized artificial intelligence (AI) or machine learning (ML) models.

Google API Services User Data Policy (Limited Use Disclosure)

JamBau Oy’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Retention and Security

  • Client and accounting records are retained for the duration of the contractual relationship and as required by applicable Finnish accounting and tax laws.
  • Access to systems and data is restricted to authorized personnel and encrypted in transit (HTTPS/TLS).

5. Your Rights and Revoking Access

Under the EU General Data Protection Regulation (GDPR), you have the right to:

  • request access to personal data held about you
  • request correction or deletion of inaccurate or unnecessary personal data
  • restrict or object to processing
  • revoke Google OAuth permissions at any time either within the tool or directly from your Google Account settings at myaccount.google.com/permissions

For any privacy-related requests or questions, please contact [email protected].

Suomeksi: Tietosuojaseloste osoitteessa www.jambau.fi