Privacy and data use

WAM Chief of Staff is a beta planning application for approved customers, operated by Windsor Align Marketing. It provides a separate account workspace for tasks, local calendar blocks, planning and optional AI assistance. Optional Google connections let you preview your inbox and upcoming calendar events.

Your account and workspace

We store your username, display name, a salted password hash, a hashed recovery code, sessions, tasks, local calendar blocks, preferences and assistant history. Each account has a separate workspace. Passwords and recovery codes are not stored in readable form. Sessions expire after seven days. Your WAM account uses its own username and password; connecting Google is separate and optional. Creating an account submits an access request. Windsor Align Marketing must match your account to its customer records and confirm your first retainer payment before approving workspace access. Payments are handled outside this app; we do not collect payment-card information here.

Customer approval and access records

We store your pending, approved or paused access status and a record of approval and pause actions, including the account identifier, operator identifier and action time. The owner can view customer names, usernames, access status and request dates to manage access. Account usernames are not verified email addresses. Pausing access signs you out and blocks protected workspace, AI and Google features while retaining your saved data and encrypted connections. New access requests remain pending until approved.

What we access from Google

Gmail connection requests read-only mailbox access. The current feature retrieves up to ten inbox messages, including their identifiers, subjects, sender details, dates and short snippets, and your connected Gmail address. It does not retrieve attachments or full message bodies. Calendar connection requests read-only event access. The current feature retrieves up to ten events from your primary calendar for the next thirty days, including their identifiers, titles, start times and end times.

This beta cannot send or delete emails, change Gmail settings, or create, edit or delete Google Calendar events. Each connection belongs to your WAM account. You choose whether to connect either service and when to load a preview.

How Google data is used, transferred and stored

Google data is used to display the inbox and calendar previews you request. Those previews pass from Google through our hosted server to your browser. Message and event preview content is not saved in the workspace database. We store the connection service, connection label or Gmail address, granted permissions, update time and encrypted access and refresh tokens so that you can use the connection again without signing in to Google for every request.

The application uses Sites hosting and its Cloudflare-backed server and database. These services process data needed to operate the application. Access and refresh tokens are encrypted before database storage and associated with the account and service that authorized them. No specific data residency is promised.

Google previews are not automatically sent to OpenAI or used by the AI assistant or local planner. We do not sell Google data, use it for advertising, or use it to train generalized AI models. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Optional AI assistance

When you enable Use OpenAI, selected workspace tasks, notes, local calendar blocks, preferences and recent assistant messages are sent to the OpenAI API to answer your requests. This includes information you type or paste into those workspace fields. API response storage is disabled in the request. OpenAI's applicable data handling policies still apply. You can turn off AI assistance in your workspace.

Retention, disconnection and deletion

Account, workspace and encrypted connection records remain while your account is active unless you remove the corresponding data. You can export or clear your workspace data under Settings. Clearing workspace data keeps your account and Google connections active; disconnect them separately under Settings → Connections.

Disconnecting Google deletes the selected service's stored connection and pending authorization records and attempts to revoke the Google permission. You can also remove WAM Chief of Staff's access directly in your Google account. Revoking a Google grant may require reconnecting the other Google service. Disconnecting does not delete anything from Gmail or Google Calendar.

Minimal AI usage records support rate-limit enforcement and are cleaned up after thirty-one days during requests. To request complete account deletion, including stored workspace and Google connection records, contact Windsor Align Marketing using the link below. We may need to verify account ownership before processing the request.

Contact and account support

For support, privacy questions or account deletion, use the Windsor Align Marketing contact form and identify WAM Chief of Staff and your account username. Do not send your password, recovery code or Google credentials. Keep your downloaded recovery code private; email password-reset delivery is not offered in this beta.

Updated October 5, 2026.