Privacy Policy
Last updated: November 4, 2026
Purpose and users
NJ Transit Payroll Collector is a private automation used only by its owner. It has no public users, advertising, or user registration.
Google data accessed
The application uses the Gmail API with the read-only gmail.readonly scope. It searches the owner's mailbox for payroll-related messages and retrieves matching original messages and PDF attachments. It cannot send, modify, or delete Gmail messages.
Use and storage
Google user data is used only to collect and verify the owner's payroll documents. Original messages, PDFs, document hashes, extraction status, and verified statement data are stored privately on the owner's Raspberry Pi. OAuth credentials are stored with restricted filesystem permissions, and the PDF password is stored as an encrypted system credential.
Sharing
Google user data is not sold, used for advertising, or shared with third parties. Generic operational notices may be sent through ntfy, but they exclude Gmail content, payroll amounts, personal identifiers, document contents, and authentication information.
Retention and deletion
Collected records are retained locally until the owner deletes them. The owner can revoke the application's Gmail access at any time through Google Account permissions and can delete the locally stored records.
Google API policy
Use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Contact
Questions can be directed to the user-support email shown on the Google OAuth consent screen.