Privacy Policy

Information we process

We process the LINE identity and messages supplied to your Banto, member and conversation identifiers created by the platform, and operational records needed to deliver and secure the service.

If you connect Google, we receive your Google account email address, a stable Google account identifier, the OAuth permissions Google grants, and encrypted access and refresh credentials. At your request, Banto may retrieve content and metadata from the services you selected:

• Gmail: a short list of recent messages, including sender, subject, and snippet.
• Calendar: upcoming events from your primary calendar, including title, times, location, and event link.
• Drive: matching file IDs, names, types, modification times, and links.
• Docs: the title and text of a requested Google Doc.

How we use Google data

Banto uses Google data only to provide and improve the user-facing features you request: connecting your chosen services, searching or reading your information, and producing the answer you requested in your LINE conversation. Google tools are read-only. Banto does not send email, alter events, edit Docs, modify Drive files, or delete Google content.

Relevant Google content may be sent through Cloudflare's AI Gateway to the configured model provider (currently OpenAI or Google) solely to generate the response requested by the member. We do not use Google Workspace API data for advertising, sale, credit decisions, or to develop, improve, or train generalized AI or machine-learning models.

How information is shared

We disclose only the data necessary to service providers acting for Banto: Cloudflare provides application, encrypted storage, network, logging, and AI Gateway infrastructure; the configured model provider (currently OpenAI or Google) processes relevant request content to generate the requested response. We may also disclose information when required by law, to protect users and the service, or with your explicit consent. We do not sell Google user data.

Storage, security, and retention

Google credentials are encrypted at the application layer and stored in Cloudflare Durable Object storage. They are keyed to the member's trusted membership and principal identity; they are not placed in LINE Queue payloads, model-visible identity fields, ordinary application logs, AI Gateway credentials, or client website Workers.

Retrieved Google content is processed on demand and is not kept as a separate Google-data archive. Content included in a member's question or Banto's answer may remain in that member's isolated conversation history and limited operational records for continuity, security, and troubleshooting. Credentials are kept while the connection is active. Other records are retained only as needed to operate the service, meet legal obligations, resolve disputes, and enforce agreements.

We use encrypted transport, encrypted credential storage, member-scoped access controls, narrow service bindings, and server-side identity derivation. No security measure is perfect, but access is limited to what is needed to operate and protect the service.

Your choices and deletion

You decide which services to connect. In LINE, ask Banto what is connected or ask to disconnect Google. After confirmation, disconnecting removes the stored connection and attempts to revoke it at Google. You may also revoke Banto directly from your Google Account connections.

To request deletion of your Banto account data, conversation history, or stored Google connection, email admin@banto.me from an address we can use to verify the request. We may retain limited information when legally required or necessary for security.

Google API Services User Data Policy

Banto's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Children, international processing, and changes

Banto is a business service and is not directed to children under 13. Cloudflare and the configured model provider (currently OpenAI or Google) may process information in countries other than yours, subject to their contractual safeguards. We may update this policy as the service or law changes; the effective date above will identify the current version.

Contact

Questions, privacy requests, or concerns: admin@banto.me.