Irida privacy notice
Irida healthcare24 is a private OBS Technologies integration operated for the healthcare24 owner. Contact: sattip@gmail.com.
We request owner email, Google Ads, Merchant and read-only Search Console authorization. Access and refresh tokens remain in permission-restricted storage outside the public document root on the dedicated host. They are used only by operator-controlled software, never exposed to the Irida agent or included in public responses, chats or analytics.
The permitted downstream data is limited to Ads customer 6023858378, Merchant account 5753408948 and exact healthcare24.gr Search Console properties through a fixed-resource read-only wrapper. Broad Ads and Merchant OAuth scopes do not authorize us to change campaigns, budgets, feeds, account access or billing. Data is not sold, used for advertising, or used to train generalized AI models. Authorized sanitized reports may be supplied to the private Irida assistant.
OAuth callback query strings are excluded from callback web logs. Necessary nonsecret operational events may be retained. Active grants are retained until revoked or replaced; restricted backups exist for recovery and can be removed by the operator on request. Revoke access in your Google Account permissions and contact the operator for deletion of stored grants and reports.
Irida’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements.
Separate personal Gmail use — 18 October 2026
This addendum describes a separate, owner-authorized personal Gmail flow under the Irida Google application, using a dedicated desktop OAuth client and local, operator-controlled gog on the Marina Mac. It does not give the healthcare24 Irida agent automatic mailbox access. The healthcare24 resource isolation, fixed-resource read-only wrapper and existing Ads, Merchant and Search Console restrictions above remain unchanged. The existing healthcare24 web consent form is not a Gmail connection form.
The personal Gmail flow is limited to the account explicitly authorized by its owner, with delegated https://www.googleapis.com/auth/gmail.readonly and https://www.googleapis.com/auth/gmail.send access plus only the basic Google identity information necessary to identify that owner. Reading is for owner-requested assistance. Sending requires explicit approval of the message and recipient; a technical send capability is not permission for autonomous sending. Apart from that approved send, this flow does not modify or delete mailbox messages, labels or settings, and does not create drafts. It does not automatically forward mail, install triggers, monitor the mailbox on a schedule or backfill historical mail.
Authorized email content may be processed by the private AI assistant to carry out the owner's requested assistance; email content is treated as untrusted data, not as instructions or authority to act. Google-derived email data is not sold, used for advertising or used to train generalized AI models. Only content needed for the authorized assistance is to be provided to the assistant.
Refresh tokens and OAuth client secrets for this separate flow must be kept in permission-restricted, operator-controlled storage on the Marina Mac, outside the public webroot. They are not supplied to the Irida agent or published on these pages. This public notice does not itself enable access or establish successful Gmail connectivity.
The owner can revoke the application's access in Google Account third-party connections and ask the operator, using the existing contact above, to remove local stored Gmail authorization and operator-held copies of Gmail assistance material, including any restricted recovery copies. Revoking access does not itself delete previously retained local material; local deletion does not delete the original Gmail messages. No fixed retention period or automatic deletion is promised here. Google revocation may also affect other authorizations associated with the same application; the separate desktop client does not by itself guarantee independent revocation.
The Google API Services User Data Policy and Limited Use statement above also applies to this personal Gmail use and any permitted transfer for owner-requested assistance.