Privacy Policy

Effective date:

Last updated:

1. Who we are

This Privacy Policy applies to the franklan.org application and website operated by Frank Lan (“we,” “us,” or “our”), accessible at https://franklan.org. This policy explains how we collect, use, process, store, disclose, and protect personal information and Google user data when you access our website, use our email management features, or contact us.

For any privacy questions, data deletion requests, or concerns, contact:

2. Information we collect

We collect the minimum amount of information required to operate our website and provide requested features:

  • Information you provide voluntarily: Contact details such as your name and email address when you communicate with us via email for support or feedback.
  • Google user data: When you sign in with Google and authorize the franklan.org application via OAuth 2.0, we access specific Google account and Gmail data strictly necessary to deliver the email management tools you request (fully detailed in Section 3).
  • Information collected automatically: Standard technical request data generated when your browser accesses our website, hosted on GitHub Pages. This may include your IP address, browser type and version, language preference, referring URL, pages viewed, and access timestamps. We do not use third-party analytics trackers, advertising cookies, or behavioral profiling tools.

If you choose not to provide information or refuse required OAuth permissions, you will be unable to use the corresponding features.

3. Google user data and Gmail integration

The franklan.org application provides an interactive email management and workflow tool that integrates with Google APIs. This section details our practices regarding Google user data.

Google user data accessed

When you authorize franklan.org through Google OAuth, our application accesses:

  • Google account identity: Your Google email address and user identifier to authenticate you and display your active profile.
  • Gmail messages and metadata: Subject lines, sender and recipient email addresses, timestamps, thread identifiers, labels, message bodies (plain text and HTML), and email attachments.
  • Gmail management capabilities: Permissions to read, compose, send, organize (apply/remove labels), and archive or delete emails strictly in response to your explicit user instructions.

How Google user data is used

We use Google user data exclusively to provide user-facing features requested by you, specifically:

  • Displaying your Gmail messages, conversation threads, and mailbox folders in the web interface.
  • Enabling you to compose drafts, reply to messages, and send outgoing emails through your Gmail account.
  • Enabling you to organize, label, star, archive, and manage your emails.

Google API Services User Data Policy compliance (Limited Use)

franklan.org’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

No AI/ML model training

franklan.org does not use Google user data—including Gmail message bodies, headers, metadata, drafts, or attachments—to train, develop, or improve generalized or non-personalized artificial intelligence (AI) and/or machine learning (ML) models.

Human access restrictions

No human beings read your Gmail messages or Google user data, unless:

  • You have given us your explicit affirmative consent to inspect specific messages (for example, to resolve a technical support ticket);
  • It is necessary for security purposes (such as investigating abuse, spam, malware, or a security vulnerability);
  • It is required to comply with applicable law, regulation, or a valid legal process; or
  • The data is aggregated and anonymized for internal technical operations where individual users and emails cannot be identified.

No sale or advertising use

We do not sell, rent, lease, or monetize Google user data under any circumstances. We do not share, transfer, or disclose Google user data to data brokers, information resellers, or third-party advertising platforms for targeted advertising, retargeting, interest-based advertising, or creditworthiness determinations.

Storage and retention of Google user data

We do not maintain permanent server-side databases of your Gmail messages or attachments:

  • In-memory and browser caching: Email messages and attachments are fetched directly from Google APIs, processed in memory, and temporarily cached in your local browser session only while you actively use the application.
  • No server-side email storage: We do not store or persist copies of your email messages, drafts, or attachments on external or centralized servers.
  • OAuth tokens: Authentication tokens are stored securely in encrypted browser storage/session credentials and are used exclusively to communicate with Google APIs on your behalf.

4. How we use information

We use collected personal information for the following purposes:

  • Providing, maintaining, and improving franklan.org and its email management capabilities.
  • Authenticating user sessions and verifying access permissions.
  • Responding to questions, feedback, and customer support inquiries.
  • Detecting, preventing, and addressing technical errors, security vulnerabilities, fraudulent activity, and abuse.
  • Complying with applicable legal and regulatory obligations.

5. Cookies and local browser storage

franklan.org does not use third-party advertising, tracking, or profiling cookies. We use standard browser storage mechanisms (such as session storage and local storage) strictly for essential technical functionality, including:

  • Maintaining your active authentication session;
  • Storing your interface display preferences (such as light or dark color scheme);
  • Temporarily caching interface state during active use.

You can clear or block browser storage through your browser settings. If you block essential storage, you may be unable to sign in or use authenticated features.

6. When we disclose information

We do not sell your personal information. We only disclose information under the following limited circumstances:

  • Hosting infrastructure: Our website is statically hosted on GitHub Pages (operated by GitHub, Inc. / Microsoft Corporation). Network requests and web asset delivery are handled through their global CDN infrastructure. GitHub does not receive access to your Gmail messages or OAuth tokens.
  • Legal and safety requirements: When required by law, subpoena, court order, or regulatory authority, or when reasonably necessary to protect the security, property, or legal rights of franklan.org, its users, or the public.
  • Business transfers: In connection with any merger, acquisition, restructuring, or sale of assets, in which case any recipient will remain bound by the privacy commitments made in this policy.
  • At your explicit direction: When you direct the application to send an email, modify a message, or share content with designated recipients.

7. International processing and transfers

franklan.org is operated from Australia. Static website assets are served globally via GitHub Pages servers, and Google API interactions communicate directly with Google's worldwide cloud infrastructure (principally located in the United States). By using our service, you acknowledge that your information may be transferred to and processed in jurisdictions outside your country of residence, which may have different data protection laws. We rely on standard contractual clauses, encrypted communications, and industry-standard security safeguards to protect international data transfers.

8. Data retention and deletion

We maintain strict data minimization and retention policies:

  • Gmail email data: Not retained on our servers. Processed transiently in memory and temporarily cached in your browser during active sessions. When you sign out or close your session, cached email data is cleared.
  • Authentication tokens: Retained in secure client-side browser storage only while your session is active. Revoked automatically when you disconnect your account or log out.
  • Support correspondence: If you contact us at privacy@franklan.org, we retain your email correspondence only as long as necessary to resolve your request and maintain audit records (up to 12 months), after which it is permanently deleted.

How to revoke access and delete data:

  • Revoke permissions: You can disconnect franklan.org and revoke its access to your Google account at any time via Google Account Security Settings (Third-party apps & services). Upon revocation, franklan.org loses all access to your Google data immediately.
  • Request data deletion: To request deletion of any support records or associated personal data held by us, email privacy@franklan.org with your request. We will verify your identity and complete the deletion within 30 days free of charge.

9. Security

We implement technical and organizational measures to safeguard your personal data and Google user data against unauthorized access, alteration, disclosure, or destruction:

  • All network communications between your browser, our website, and Google APIs are encrypted in transit using industry-standard Transport Layer Security (TLS 1.2 / TLS 1.3 / HTTPS).
  • Authentication relies on OAuth 2.0 protocols with time-limited tokens; we never receive, process, or store your Google account password.
  • Email bodies and attachments are processed client-side without permanent server storage, eliminating central database exposure risks.
  • Access to systems and code repositories is protected by strong multi-factor authentication and principle-of-least-privilege access controls.

While we use rigorous safeguards, no electronic transmission over the internet or storage method is 100% secure, and we cannot guarantee absolute security.

10. Your choices and privacy rights

Depending on your location, you may have rights under applicable data protection laws (such as the Australian Privacy Act 1988, GDPR/UK GDPR, or CCPA/CPRA), including:

  • Access: The right to request confirmation of whether we process your personal data and to obtain a copy.
  • Rectification: The right to request correction of inaccurate or incomplete personal information.
  • Erasure (Deletion): The right to request deletion of your personal data.
  • Consent withdrawal: The right to withdraw consent at any time (including revoking Google OAuth access), without affecting the lawfulness of processing prior to withdrawal.
  • Restriction and objection: The right to restrict or object to certain types of data processing.
  • Data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, contact us at privacy@franklan.org. We will respond promptly and in accordance with applicable legal deadlines.

11. Children’s privacy

franklan.org is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at privacy@franklan.org so we can delete such information without delay.

12. Third-party websites and services

Our application and website interact with third-party services whose privacy practices are governed by their own policies:

13. Complaints

If you have any questions, concerns, or complaints regarding how we handle your personal information or Google user data, please contact us first at privacy@franklan.org so we can investigate and address your concern.

You may also have the right to lodge a complaint with your local data protection supervisory authority:

  • Australia: Office of the Australian Information Commissioner (OAIC).
  • United Kingdom: Information Commissioner's Office (ICO).
  • European Union: Your national Data Protection Authority (EDPB Member List).

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect modifications to our application, Google API requirements, or applicable legal standards. When we make updates, we will revise the “Last updated” date at the top of this page. If we make material changes to how we collect, use, or share Google user data, we will provide prominent notice on our website or through the application prior to the changes taking effect. Your continued use of franklan.org following the posting of an updated policy signifies your agreement to the changes.