1. Overview
Lake of Sunrise ("we," "us," or "our") is a non-governmental organization promoting artistic freedom across cultural communities. This Privacy Policy explains how we collect, use, and protect information in connection with our website (lakeofsunrise.org) and the Email Tool tool we provide to member organizations.
We are committed to privacy as a matter of principle. We do not build advertising profiles, sell data, or collect more than is strictly necessary to provide the services our members rely on.
2. Gmail API and Google User Data
Lake of Sunrise and its Email Tool tool access Google user data solely to provide bulk email sending functionality on behalf of our members. The following describes exactly how we handle Google user data:
What we access:
- Your Gmail account's ability to send emails (
gmail.send) — used only to send emails you compose and initiate through our tool - Your Google account email address (
userinfo.email) — used to identify your account and associate your sending jobs with your login - Your Google account display name (
userinfo.profile) — used solely to display your name in the "From" field of emails you send
What we do NOT do:
- We never read, scan, or access any existing emails in your Gmail inbox or any other folder
- We never store the content of emails you send beyond the duration of your active sending job
- We never share, sell, transfer, or disclose your Google user data to any third party
- We never use your Google data for advertising or any purpose unrelated to the sending function you explicitly initiate
How we store your data:
- Your OAuth refresh token is stored securely in an encrypted database solely to allow sending to continue in the background after you close your browser
- You can revoke our access at any time by visiting myaccount.google.com/permissions and removing Lake of Sunrise / Email Tool
Google API Limited Use Disclosure:
- Lake of Sunrise's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Human personnel at Lake of Sunrise will not read your Google user data unless we have your explicit agreement for troubleshooting purposes, it is necessary for security purposes (such as investigating abuse), or as required by applicable law.
3. Data We Collect
We collect only the minimum information necessary to operate our services:
- Account identifiers: Your Google account email address and display name, obtained via OAuth when you sign in to the Email Tool.
- OAuth tokens: A refresh token issued by Google, stored securely to enable background email sending on your behalf.
- Sending job data: The recipient list and email content you provide for a sending job, retained only while the job is active and deleted upon completion.
We do not collect browsing data, analytics, cookies, or any information from visitors to this website who do not sign in to a tool.
4. How We Use Your Data
Data we collect is used exclusively to:
- Authenticate your identity and authorize sending on your behalf
- Execute email sending jobs you create and initiate through the Email Tool
- Associate your active and completed sending jobs with your account
We do not use your data for analytics, marketing, research, or any purpose beyond the specific functionality you invoke.
5. Data Sharing
Lake of Sunrise does not sell, rent, or share your personal data with any third party. The only external services that receive data in connection with our tools are:
- Google (Gmail API): Your emails are sent via Google's own infrastructure using your credentials. We have no control over Google's own data practices, which are governed by Google's Privacy Policy.
- Infrastructure providers: Our servers and database are hosted on third-party cloud platforms (Render and Supabase). These providers process data only as necessary to operate our services and are contractually bound to protect it.
6. Data Security
We take reasonable technical and organizational measures to protect the data we hold:
- OAuth tokens are stored in an encrypted database with access controls
- All data in transit is encrypted via HTTPS/TLS
- Sending job data is deleted upon job completion and not retained
No method of transmission or storage is 100% secure. If you have concerns about data security, you may revoke our access at any time via Google Account Permissions.
7. Your Rights and Controls
You are always in control of your data:
- Revoke access: Remove our access to your Google account at any time via myaccount.google.com/permissions.
- Request deletion: Contact us at info@lakeofsunrise.org to request deletion of any data associated with your account.
- Data portability: You may request a copy of any data we hold about you by contacting us.
Revoking access will prevent future sending jobs but will not affect emails already sent.
8. Contact Us
If you have questions or concerns about this Privacy Policy or how we handle your data, please contact:
Lake of Sunrise
info@lakeofsunrise.org
lakeofsunrise.org
This policy may be updated from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our tools after a policy update constitutes acceptance of the revised policy.