Executor — Privacy Policy
Last updated: November 4, 2026. This policy explains what data the Executor application collects when you connect a Google account, why, how long it is kept, and how you can delete it.
1. Who we are
Executor is operated by Coelus (Enzo Valvasori, sole proprietorship), Montpellier, France, who is the data controller. Contact: contact@coelus.fr.
2. Google user data we access
We access Google user data only after you approve it on Google's consent screen, and only for the permissions (scopes) listed below.
| Data | Scope | Purpose |
|---|---|---|
| Account name, email address, Google account ID, profile picture | openid, email, profile | Show which Google account is connected and keep the connection tied to the right user. |
| Gmail messages: headers, body, attachments, labels | gmail.readonly | Search and read messages when you or an AI assistant acting on your request ask for it. |
| Ability to send an email from your account (optional, only if you enable it) | gmail.send | Send a message only when you explicitly request it. |
| Google Search Console properties and performance data | webmasters.readonly | Produce reports on sites you own when you ask for them. |
| OAuth access and refresh tokens | All of the above | Keep the connection active without asking you to sign in each time. |
We request the narrowest scope that makes each feature work and do not request access to any other Google data.
3. How we use Google user data
Google user data is used only to authenticate the connected account, display the connection in Executor, and run the searches, reads and actions that you request or configure. We do not use it for advertising, profiling, selling, or to build or train generalized AI or machine-learning models.
4. Sharing and transfer
- We do not sell Google user data, and we do not share it with data brokers or advertising platforms.
- When you ask an AI assistant connected to Executor to read your mail, the content needed to answer your request is passed to the AI model provider configured for that assistant, solely to produce the answer you requested. We do not use it for any other purpose.
- Our hosting providers (Cloudflare, Inc., which runs Executor) process data on our behalf as technical subcontractors.
- We disclose data when required by law, or for security, fraud or abuse investigations.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Human access
No human at Coelus reads the content of your Gmail messages, unless you give explicit consent for a specific message, it is necessary for security purposes (for example investigating abuse), or it is required by law.
6. Storage, security and retention
- OAuth tokens are stored encrypted, with access controls, and data is encrypted in transit (HTTPS).
- Executor does not keep a copy of your mailbox. Message content is read on demand; some results and technical metadata (for example the request made and its status) can appear in the activity history that you can review, for security and troubleshooting.
- Connection data is kept as long as the integration is active. When you disconnect it, or ask us to delete it, the tokens and related data are deleted from active systems; temporary technical backups are overwritten on their regular cycle.
7. Your rights and choices
You can revoke Executor's access at any time in Executor (Connections), or on your Google Account permissions page. Under the GDPR you may request access to, correction of, or deletion of your data, and object to or restrict its processing, by writing to contact@coelus.fr. You may also lodge a complaint with the CNIL (cnil.fr).
8. Changes
If this policy changes, the date above is updated, and any change affecting Google user data is made visible here before it applies.
9. Contact
Coelus — Enzo Valvasori, Montpellier, France · contact@coelus.fr
French version: Politique de confidentialité.