Your information

Privacy policy

Last updated: 8 September 2026

1. Who operates the app

Kstam-Agents (also displayed as “kstam-agents”) is a private automation app, not a service open to public registration. This policy covers the app’s Google integrations and this public information website.

For privacy questions or deletion requests, contact Kostas Stamatoukos at stamatoukosks@gmail.com.

2. Information the app accesses

The information available to a workflow depends on the Google permissions granted and the task being performed. It may include:

• Account information: the account’s name, email address, and identifiers needed to identify the connected account.
• Files and documents: file names, metadata, contents, and attachments, including documents, spreadsheets, and presentations.
• Email, calendar, and task information: message contents and metadata, attachments, event details, participants, and task details when the relevant access is enabled.
• Authorization and operational data: OAuth access and refresh tokens, workflow instructions, results, and diagnostic information.

Authorization is handled by Google. The app uses OAuth tokens rather than asking for the owner’s Google password. Data retrieved from the owner’s account can include information about other people, such as message senders or meeting participants.

3. How information is used

Information is used to provide the personal workflows the owner requests or configures. These may include searching and summarizing material, organizing information, drafting content, managing schedules, and creating or updating Google content. Actions that change or send information require the relevant Google permissions and workflow authorization.

Working copies, summaries, conversation history, and agent memory may be created to complete a task or support later personal retrieval. Operational information may also be used to investigate failures and maintain the integrations.

4. AI processing and other service providers

A workflow may send selected Google content, instructions, and relevant context to external AI providers chosen by the operator for processing, such as summarization, drafting, or reasoning. AI gateways, hosting providers, private storage services, and memory services may also process information where used by that workflow.

This means Google content is not necessarily processed only on the owner’s device. Providers may process or retain submitted information under the terms and data settings applicable to the operator’s account, and processing may take place in other countries. The operator must select services and settings consistent with this policy and Google’s requirements.

The app’s permitted use of Google data is limited to providing its personal automation features. Google data must not be sold, used for advertising, or used to develop, improve, or train generalized AI or machine-learning models. Transfers to service providers must be necessary for these features and consistent with Google’s Limited Use requirements. Any legally required disclosure must be limited to the applicable requirement.

Kstam-Agents’ use and transfer of information received from Google APIs must adhere to the Google API Services User Data Policy, including its Limited Use requirements.

5. Storage and retention

OAuth credentials are stored in the app’s configured credential storage. Retrieved content and derived information may be stored on the owner’s devices, private infrastructure, or selected service providers, including in working files, conversation history, private knowledge collections, and agent memory.

There is no single automatic deletion period promised for all workflows. Saved material may remain until the owner deletes it. Copies may also remain in backups, file history, or provider systems until separately deleted or expired under their applicable retention settings.

Access to credentials and stored Google data must be restricted to the operator and the services needed for authorized workflows. This public website does not host the app’s OAuth credentials or private Google content.

6. Revoking access and deleting information

The owner can revoke Kstam-Agents’ access through Google Account connections. Revocation prevents further access through the revoked authorization; it does not automatically erase content already copied or information derived from it.

To remove retained information, the owner can delete it from the relevant working files, conversation history, knowledge collections, and memory systems, and use provider deletion controls where applicable. Privacy or deletion requests can also be sent to the contact address above. Backups and provider-held copies may require separate handling. Deleting an app-held copy does not delete the original in Google unless a separate authorized action does so.

7. Visitors to this website

These pages do not include advertising, analytics scripts, account registration, or a contact form. Contact links open your email application. The hosting provider, Cloudflare, may process technical request information, such as IP addresses and request logs, to deliver and protect the site. See Cloudflare’s privacy policy.

8. Changes to this policy

This policy will be updated when the app’s data practices change. The date above identifies the latest revision. Material changes to the purposes or types of Google data processing require updated disclosure and any necessary consent before that processing begins.