Goodison Systems Hub Privacy Policy

Effective September 21, 2026

Who we are

Goodison Systems Hub is being developed by Goodison Collective LLC, Florida, to organize business communications, client-update notifications, and follow-up work.

Contact: krissy@thegoodisongroup.com.

Current status

The Hub is in limited testing using synthetic client records and test messages. The Core Gmail connection is currently authorization-only: it verifies the authorized account's identity and securely stores connection credentials. It does not read email messages or attachments. Automatic mailbox monitoring, draft creation, sending, and AI processing of mailbox content remain disabled.

Google account access

With the account holder's authorization, the Core Gmail connection requests Gmail read-only access (gmail.readonly) and permission to manage drafts and send emails (gmail.compose). These permissions apply across the authorized mailbox; Google does not limit them to MedicarePRO notifications. The compose permission includes the ability to send email even though the current authorization gateway does not implement sending or draft creation.

The intended later workflow is to process approved communications for follow-up work and prepare drafts for human review. Mailbox processing will remain disabled until its data-handling controls and disclosures are reviewed. External messages require the designated owner's approval. No automated sending is enabled by completing this authorization step. Google’s permission description

Information and purpose

At this authorization-only stage, the connection handles account identity, authentication credentials, and sign-in audit metadata. A later approved workflow may process message identifiers, sender and recipient details, subjects, timestamps, and the minimum approved message content needed for communication and follow-up work. Those mailbox-processing functions are not active now.

Operational records may include client references, source identifiers, review status, matching confidence, and audit history. Uncertain matches require review. Notifications will not automatically overwrite MedicarePRO records.

OAuth credentials support the authorized connection; they are not intended for display in operational records.

Use, storage, and sharing

Google account data is limited to the disclosed communication and follow-up functions. It is not sold, used for advertising, or used to train general-purpose AI models. The initial notification reader is not designed to send email content to an AI model.

The pilot uses Google Cloud Run, Firestore, and Secret Manager. Production access, logging, retention, and recovery settings remain subject to verification.

Disclosure to service providers is limited to delivering the authorized functions. Human access to Google data requires the user’s affirmative agreement to the specific data, except where Google’s policy permits access for security or legal reasons.

Google API data handling is subject to the Google API Services User Data Policy, including Limited Use restrictions.

Retention and deletion

Pilot records currently remain until authorized removal. An operational retention schedule has been approved, but its production controls are not yet implemented. The final retention periods and backup handling will be disclosed before production processing begins.

Disconnecting a Google account does not automatically delete records already stored. Contact us to request review, correction, or deletion, subject to applicable recordkeeping obligations.

Your choices

You can revoke access through Google Account connections. Please do not include medical information, passwords, or access tokens in an initial support request.

This website

These information pages are hosted using ZenBusiness Website Builder and are separate from the private Hub application. They do not provide access to connected mailboxes or client records and are not a client intake portal.

Hosting services may process technical information, such as IP addresses, browser details, and request logs, to deliver and secure the website. No Google tracking IDs are configured through the website editor’s Google Tools setting.

Please do not submit medical information, passwords, authentication tokens, or private client-portal links through this website.

Changes

Changes to data access or use will be disclosed before activation, with renewed authorization where required.