Privacy Policy — Sara Duct Financial Auditor

Last updated: August 21, 2026

This Privacy Policy describes how Sara Duct International Air Conditioning Co. ("Sara Duct", "we") handles data in connection with the Sara Duct Financial Auditor application, an internal system used solely by Sara Duct for financial and administrative auditing.

1. What this application is

Sara Duct Financial Auditor is an internal tool, not a public product. It is used exclusively by Sara Duct employees and management for internal financial controls. It is not distributed to, or used by, the general public.

2. Gmail data we access

The application connects to exactly one Google account owned by Sara Duct: saraductfinancialauditor@gmail.com ("the audit mailbox"). It does not access, request, or store data from any other Gmail or Google account.

Through the Gmail API, the application:

• Sends audit-finding report emails from the audit mailbox to specific, named internal recipients (department managers, the General Manager, and, where configured, the CEO) at Sara Duct.
• Reads messages in the audit mailbox — specifically, replies to those audit reports — so that a human auditor can review and follow up on the correspondence.

3. How this data is used

Gmail data accessed through the audit mailbox is used only to:

• deliver internal audit findings to the responsible Sara Duct staff member(s); and
• track and review replies to those findings as part of the internal audit workflow.

We do not sell Gmail data. We do not share Gmail data with any third party. We do not use Gmail data for advertising, and we do not use it to train generalized AI/ML models.

4. Other data the system reads

Separately from Gmail, the application also connects read-only to Sara Duct's own Odoo ERP system to review accounting and purchasing records. This is Sara Duct's own internal business data, not personal data obtained through Google APIs, and it is never written back to or modified in Odoo by this application.

5. Data retention and storage

Audit findings, their delivery status, and any tracked reply metadata (e.g., whether a reply was received) are stored in Sara Duct's own private systems for internal record-keeping and audit-trail purposes. Data is retained only as long as needed for that internal audit purpose and is not published or made available externally.

6. Google API Services User Data Policy

Sara Duct Financial Auditor's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Contact

Questions about this policy or how the audit mailbox is used can be sent to: saraductfinancialauditor@gmail.com.