This policy describes how JEPA’s privately operated personal and household applications, including Home Assistant Mail and Packages, access and use information. The operator can be contacted at admin@jepa.bid.
Information we access
When you authorize a connected application, it may receive account identifiers, such as your email address, and the information needed for the feature you enable. For mail and package tracking, this includes relevant email headers, subjects, message contents, shipping and tracking details, and delivery images or attachments needed to identify and display mail and package information.
Google account and Gmail access
Google OAuth is used to authorize Gmail connections without providing your Google password to JEPA. Home Assistant stores authorization tokens so the integration can continue connecting while access remains authorized.
Gmail IMAP requires the broad https://mail.google.com/ permission. That permission technically allows reading, composing, sending, and permanently deleting email. The intended purpose of the mail and package integration is to read and process delivery information, not to send messages or delete your mailbox.
How information is used
Connected account data is used to provide the features you request, including private dashboards, delivery summaries, notifications, and household automations. Data is not sold, used for advertising, used for credit decisions, or used to train generalized artificial intelligence or machine learning models.
Storage and retention
Authorization tokens, configuration, derived tracking information, and downloaded delivery media may be stored on the Home Assistant system and included in its backups. Information is retained while needed for the enabled features or until removed by the operator. Older copies may remain in backups until those backups are rotated or deleted.
Sharing and service providers
Information may be visible to household users who have been granted access to the relevant dashboard or notifications. It may be processed by providers necessary to deliver a feature you enable, such as the email provider or a selected notification service. Information may also be disclosed when legally required or necessary to protect security. Private mailbox content and authorization tokens are not published on this informational website.
Website hosting and cookies
This website is hosted by Cloudflare. Cloudflare may process IP addresses, request information, and other technical data to serve and protect the website under its own policies. The supplied website does not include advertising, analytics scripts, forms, or application cookies. Third-party services or optional hosting features may have their own data practices.
Your choices and deletion
You can disconnect an integration or revoke its access through your Google Account’s third-party connections settings. Revocation prevents future authorized access but does not automatically erase previously stored information. To request deletion of stored data or tokens, contact the operator at admin@jepa.bid. Requests can include removal from the active system and, where practical, retained backups.
Security and changes
The operator uses access controls and encrypted service connections where supported. No system can guarantee absolute security. This policy may be updated as features change; the effective date above identifies the current version.