How Diamond On uses Google user data

1. Who connects a Google account

Diamond On is business software for chauffeured-transportation companies. A company's owner or administrator may connect the company's Google Workspace mailbox so the company can send customer email from it and, optionally, read and answer its inbox inside Diamond On. Only the company's own staff with the right permissions see that mailbox; Diamond On personnel do not.

2. The permissions (scopes) we request and why

Each permission is requested only for the feature that needs it, and each can be left off:

• https://www.googleapis.com/auth/gmail.send — “Send email on your behalf”: requested when a company connects Google in Email setup (“Connect with Google”). It lets Diamond On send messages from the connected mailbox: booking confirmations and other customer messages the company's staff compose or that the company's own templates produce. Nothing is read with this permission. Why: so messages come from the company's real mailbox, land in its Sent folder and replies thread back to it — instead of from a shared Diamond On address.
• https://www.googleapis.com/auth/gmail.modify — “Read, compose and modify email (except permanent deletion)”: requested only when the company also turns on “Also show your inbox in Diamond On”. It lets Diamond On show the mailbox's conversations inside Diamond On, read live each time a page opens; mark messages read/unread; archive; create and update drafts; and apply three Diamond On labels (Linked, Needs attention, Handled). It never deletes mail. Why: staff handle customer email next to the bookings it is about. Read-only is not enough because the product writes read state, drafts and labels back to the mailbox.

3. What we store — and what we never store

Diamond On is a pass-through: conversations are read live from Google each time a page is opened and are not copied. The only thing kept is a thin index per message — Google's message and thread ids, the subject line, the sender and recipient addresses, the date, folder/label ids, read state, and the links a company makes between a conversation and its own customer or booking records.

We never store message bodies, HTML, snippets, attachments or draft text. Attachments are streamed to the staff member who opens them and are not written to our storage. Access and refresh tokens are stored encrypted (AES-256-GCM) and are deleted when the account is disconnected, together with the index.

4. Ask Diamond (assistant) and Google data

When a company turns the assistant on for mail, the text of one customer conversation is sent, for that request only, to the language-model provider the company's plan uses, to propose a reply, a booking or a change for a person to review. The conversation text is not stored by Diamond On, is not logged, and is not used to develop, improve or train generalized artificial-intelligence or machine-learning models. Proposed replies are saved as drafts in the company's own mailbox; nothing is sent unless the company explicitly chose automatic replies in its settings.

5. Limited Use

Diamond On's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular: Google user data is used only to provide and improve the user-facing features described above; it is not used for advertising; it is not sold; it is not transferred to third parties except as needed to provide those features (the language-model provider for the assistant, with the limits above), for security, or to comply with law; and no human at Diamond On reads it except with the company's explicit consent for a support case, for security or abuse investigation, or where the law requires it.

6. How to revoke access

In Diamond On: Settings → Email setup → Disconnect (deletes the stored tokens and the mailbox index at once), or Settings → Mail → “Forget everything and stop”. At Google: myaccount.google.com → Security → Third-party apps & services → Diamond On → Remove access.

7. Contact

Questions about Google data use: legal@diamondon.com.