Privacy Policy
Last Updated: May 5, 2024
This Privacy Policy explains how personal data is collected, used, and processed by the n8n instance hosted at n8n.calendar.express.
1. Who We Are
This self-hosted n8n instance is operated by Jared Moore (referred to as "I", "me", or "my") for personal use. You can contact me at: [email protected].
2. Personal Data Processing
This n8n instance processes personal data exclusively for my personal automation needs. The data is processed within the self-hosted n8n instance under my direct control. Data is not shared with external third parties, except as explicitly configured in automation workflows I create (e.g., sending an email via the Gmail API) or implicitly with the Google services authorized via OAuth themselves.
3. Google OAuth Scopes and Data Usage
The following Google OAuth scopes are requested to enable personal automation workflows:
3.1 Non-Sensitive Scopes:
https://www.googleapis.com/auth/userinfo.email
- To identify the connected Google account within n8n credentials.https://www.googleapis.com/auth/userinfo.profile
- To identify the connected Google account within n8n credentials.https://www.googleapis.com/auth/drive.file
- To allow workflows to see, edit, create, and delete specific Google Drive files used within automation workflows.https://www.googleapis.com/auth/drive.appdata
- To allow workflows to manage their own configuration data in Google Drive.https://www.googleapis.com/auth/drive.install
- To connect the n8n instance to Google Drive.https://www.googleapis.com/auth/calendar.app.created
- To allow workflows to create secondary Google calendars and manage events on them.https://www.googleapis.com/auth/calendar.calendarlist.readonly
- To allow workflows to see the list of Google calendars for scheduling purposes.https://www.googleapis.com/auth/calendar.events.freebusy
- To allow workflows to check availability on Google calendars for scheduling.https://www.googleapis.com/auth/calendar.events.public.readonly
- To allow workflows to see events on public calendars.https://www.googleapis.com/auth/calendar.settings.readonly
- To allow workflows to view calendar settings for proper event creation.
3.2 Sensitive Scopes:
https://www.googleapis.com/auth/docs
- To allow workflows to see, edit, create, and delete Google Docs, particularly for creating meeting summaries.https://www.googleapis.com/auth/drive.photos.readonly
- To allow workflows to view photos, videos, and albums in Google Photos for personal automation purposes.https://www.googleapis.com/auth/drive.apps.readonly
- To allow workflows to view Google Drive apps for integration purposes.https://www.googleapis.com/auth/drive.apps
- To allow workflows to view and manage Google Drive apps for integration purposes.https://www.googleapis.com/auth/activity
- To allow workflows to view activity history of Google apps for auditing and automation triggers.https://www.googleapis.com/auth/spreadsheets
- To allow workflows to see, edit, create, and delete Google Sheets for data processing.https://www.googleapis.com/auth/spreadsheets.readonly
- To allow workflows to see Google Sheets for data processing.https://www.googleapis.com/auth/calendar
- To allow workflows to see, edit, share, and permanently delete accessible calendars for comprehensive calendar management.https://www.googleapis.com/auth/calendar.acls
- To allow workflows to see and change sharing permissions of owned calendars as part of automation processes.https://www.googleapis.com/auth/calendar.acls.readonly
- To allow workflows to see sharing permissions of owned calendars.
3.3 Restricted (Gmail) Scopes:
https://www.googleapis.com/auth/gmail.readonly
- To allow workflows to view email messages and settings for processing and automation triggers.https://mail.google.com/
- To allow workflows to read, compose, send, and permanently delete emails from Gmail as part of comprehensive email management.https://www.googleapis.com/auth/gmail.modify
- To allow workflows to read, compose, and send emails as part of email management.https://www.googleapis.com/auth/gmail.compose
- To allow workflows to manage drafts and send emails.https://www.googleapis.com/auth/gmail.metadata
- To allow workflows to view email metadata like labels/headers (not body) for organization and triggering purposes.https://www.googleapis.com/auth/gmail.insert
- To allow workflows to add emails into the mailbox.https://www.googleapis.com/auth/gmail.settings.basic
- To allow workflows to manage email settings and filters automatically.https://www.googleapis.com/auth/gmail.settings.sharing
- To allow workflows to manage sensitive mail settings.
4. How Data Is Used
Data accessed through these scopes is used exclusively for personal automation workflows configured by me within the self-hosted n8n instance. Examples include:
- Calendar Management: Creating, editing, and managing calendar events based on specific triggers or schedules.
- Document Processing: Automatically generating meeting summaries from calendar events and saving them to Google Drive. Creating and modifying Google Docs and Sheets.
- Email Management: Using AI to automatically label, categorize, and process emails in Gmail. Sending automated emails based on triggers.
All data processing occurs within the self-hosted n8n instance under my direct control. The data flows only between my Google account and my n8n instance.
5. Data Storage and Security
All data processed by this n8n instance is stored:
- Within the self-hosted n8n instance on a secure server
- Within my Google account for data stored in Google services
- Temporarily in memory during workflow execution
Security measures include:
- HTTPS encryption for all communications
- Regular security updates to the server and n8n instance
- Access restricted to myself as the sole operator
6. User Rights and Consent Management
As the sole user of this personal n8n instance, I can:
- Revoke OAuth consent at any time through my Google account settings
- Manage credentials within the n8n instance
- Delete any data stored within the n8n instance
- Request information about my own data by contacting myself at [email protected]
7. Compliance with Laws
This n8n instance and its operation comply with relevant data protection laws and explicitly adhere to the Google API Services User Data Policy. As this is a personal-use instance, it does not engage in commercial data processing or sharing with third parties.
8. Changes to This Privacy Policy
I may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date.
9. Contact Information
For any questions or concerns about this Privacy Policy or data processing practices, please contact me at: [email protected].