Privacy Policy

Effective August 27, 2026

Agent Lexi is an internal maintenance application. This policy explains the information it handles and, specifically, how it uses Google account data.

Google account data

Agent Lexi requests the Google OAuth scope gmail.send solely to send transactional email from the Agent Lexi Gmail account. The application does not request or use permission to read Gmail messages, inspect the inbox, access contacts, delete messages, or modify existing mailbox data.

Outgoing message recipients and content are supplied by authorized application workflows, such as password-reset and maintenance-status notifications. OAuth credentials are stored in the protected server runtime environment and are not exposed to browsers or application users.

Other information

Authorized users may enter maintenance jobs, work-order details, status updates, notes, photos, troubleshooting messages, and reference documents. Account records identify authorized users, their work email, role, and department access. Work email is used for account recovery and approved operational notices.

How information is used

• To operate the shared maintenance queue and TV status board.
• To preserve maintenance history and authorized reference material.
• To provide requested AI-assisted work-order reading and troubleshooting.
• To send requested transactional email.

Service providers and sharing

Application data is hosted on DigitalOcean. Data submitted to AI features may be processed by OpenAI to produce the requested result. Transactional email is delivered through the Gmail API. Information is not sold or used for advertising. It is shared only with authorized users, intended email recipients, and service providers needed to operate these functions.

Retention and security

Maintenance records are retained as operational history until an authorized administrator removes them under applicable workplace practices. Password-reset links expire after 30 minutes and work only once; only a token digest is retained by the application. OAuth access remains until it is revoked or the integration is disabled. Agent Lexi uses encrypted HTTPS connections, restricted accounts, protected server credentials, and private application storage.

Access and questions

Authorized users may request correction or deletion of their account information through the application administrator. Questions about this policy or Google data use can be sent to agentlexiai@gmail.com.

If Agent Lexi later requires additional Google access, this policy and the OAuth consent request will be updated before that access is used.