Privacy Policy

Effective date: 2 September 2026

1. Scope

This Privacy Policy describes how MTOS LIVE GATE accesses, uses, stores, and protects information when the operator authorizes the app through Google OAuth. MTOS LIVE GATE is intended for the operator's personal use and is not offered as a public multi-user service.

2. Google OAuth scopes requested

The Windows runner invokes a deployed Google Apps Script project through the Apps Script API. Google requires the authorization to cover the OAuth scopes used by that project. The current authorization requests these scopes:

• https://www.googleapis.com/auth/drive — project-level Google Drive access required by the Apps Script project. The Live Gate runner itself does not browse or enumerate unrelated Drive files.
• https://www.googleapis.com/auth/spreadsheets — allows the Apps Script runtime to read MTOS spreadsheet state and write the narrowly defined Live Gate readiness, reservation, and audit/result records required by the R1.30 contract.
• https://www.googleapis.com/auth/script.external_request — permits approved external HTTPS requests. Live Gate uses this for Dhan profile/history/market-quote data needed by the gate. It is not used to place, modify, or cancel orders.
• https://www.googleapis.com/auth/script.scriptapp — project-level Apps Script authorization used by the deployed script environment and unattended execution path. The Live Gate Windows runner does not install, delete, or modify Apps Script triggers or deployments.
• https://www.googleapis.com/auth/script.container.ui — a project-level scope required by the existing Apps Script project. The unattended Live Gate Windows runner does not use Google container UI to display or collect operator data.

3. How Google data is used

Google-authorized access is used only to execute the operator-requested MTOS Live Gate workflow: verify pre-boundary readiness, read required MTOS state, create the narrowly scoped durable readiness/reservation evidence, and record the final current-day gate result. OAuth access never creates trading permission.

4. External market-data processing

When the R1.30 contract requires it, the Apps Script runtime may send authenticated HTTPS requests to the operator's Dhan account for profile validation, historical market data, or a single boundary market quote. MTOS LIVE GATE does not use its Google OAuth authorization to place, modify, or cancel Dhan orders and does not create broker trading authorization.

5. Storage and retention

OAuth client material and OAuth tokens are stored only on the operator's Windows device in a restricted local application directory protected by filesystem access controls. OAuth secrets and tokens are not stored on this public website and are not intentionally written to Live Gate result logs.

MTOS spreadsheet readiness, reservation, and audit/result records may be retained as operational evidence according to the MTOS fail-closed audit design so duplicate or ambiguous execution can be detected and prevented.

6. Sharing and sale

MTOS LIVE GATE does not sell Google user data, does not use Google user data for advertising, and does not transfer Google user data for generalized AI or machine-learning model training. The Live Gate workflow does not send Google Workspace data to OpenAI.

7. Security controls

• Dedicated OAuth client and dedicated Google Cloud project.
• Locally restricted token storage.
• No OAuth secret, access token, or refresh token intentionally logged.
• Boundary execution is single-look and no-automatic-retry.
• Live Gate output does not create broker authorization or order authority.

8. Revocation and deletion

The operator can revoke MTOS LIVE GATE access at any time through Google Account security controls for third-party connections. The operator may also delete locally stored OAuth token material. Safety/audit evidence may be preserved through controlled historical records rather than silently rewritten.

9. Google API Services User Data Policy

MTOS LIVE GATE's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google-authorized data is used only for the operator-requested Live Gate functionality and not for advertising, unrelated profiling, lending decisions, or unrelated purposes.

10. Website data

This public branding website is a static informational site. It contains no login, no form, no advertising, and no application analytics or tracking code supplied by MTOS LIVE GATE.

11. Contact

Privacy and support requests: support@mtosaisupervisor.com.