Privacy Policy
Welcome to Air4.Media. We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines what data we collect, how we use it, and your rights regarding your information.
Information We Collect
We collect information that you provide directly to us when you create an account, submit a request, or otherwise interact with the site. The types of information we may collect include:
- Personal Information (name, email address, etc.)
- Media Files (photos, videos, and other assets)
- Technical Information (IP address, browser type, etc.)
How We Use Your Information
We use the information we collect for various purposes, including:
- Providing, operating, and maintaining our services
- Improving, personalizing, and expanding our services
- Communicating with you, either directly or through one of our partners
- Processing your transactions and managing your account
Google API Services & Email Integration
Air4.Media uses the Gmail API to enable users to send business emails (such as invoices and quotes) directly from their connected Google account. Our use of Gmail API data is limited to the following:
- gmail.send — Used solely to send outgoing emails on behalf of the authenticated user (e.g., invoices, quotes, and client communications). We do not read, store, or process the content of sent emails beyond delivery confirmation.
- gmail.readonly — Used solely to verify email delivery status and retrieve basic metadata (e.g., sent confirmation) to update records within the platform. We do not read, index, or retain email body content.
Air4.Media's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We do not use Gmail data to serve advertisements.
- We do not allow humans to read your Gmail data unless you have given us explicit permission or it is required for security purposes.
- We do not use or transfer Gmail data for AI or machine learning model training.
- We do not share Gmail data with third parties except as necessary to deliver the service or as required by law.
Data Protection Mechanisms
We implement the following technical and organizational measures to protect your sensitive data:
- Encryption in Transit — All data transmitted between your browser and our servers is encrypted using TLS (HTTPS). All API communications with Google are encrypted using industry-standard protocols.
- Encryption at Rest — OAuth tokens and sensitive credentials are stored in encrypted form in our database and are never exposed in logs or client-side code.
- Access Controls — Access to user data is restricted to authenticated and authorized users only. Administrative access is limited to verified personnel protected by multi-factor authentication (MFA).
- Minimal Data Retention — We retain only the data necessary to provide the service. OAuth refresh tokens are stored only as long as the integration is active. Email content is not stored on our servers beyond what is required for delivery.
- Token Security — Google OAuth tokens are scoped to the minimum permissions required (gmail.send and gmail.readonly) and can be revoked at any time from your Google Account settings.
- Audit Logging — Email send events are logged with metadata (recipient, subject, timestamp, status) for compliance purposes. Email body content is not retained in logs.
Sharing Your Information
We do not share or sell your personal information to third parties except in the following circumstances:
- When required by law or in response to legal processes
- To protect our rights, privacy, safety, or property
- With your consent or at your direction
Cookies
Air4.Media uses cookies to enhance the user experience. Cookies are small text files stored on your device by your web browser. These cookies help us remember your preferences and customize our site to your interests. By using Air4.Media, you consent to our use of cookies.
Your Rights
You have the right to access, correct, or delete your personal information at any time. You may also revoke any third-party integrations (including Google) at any time by visiting your account settings. To exercise these rights, please contact us at privacy@air4.media.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will notify you by revising the date at the bottom of this policy.
If you have any questions about this Privacy Policy, please contact us at privacy@air4.media.
This Privacy Policy was last updated on 04.24.26.