Privacy Policy — Costello Family

Effective date and last updated: October 24, 2026

Costello Family (costellos.org and www.costellos.org) is a private, non-commercial home server operated by the Costello household for personal and family use. It is not a public commercial service and does not offer public account registration. This Privacy Policy describes what data—including Google user data—Costello Family accesses, how that data is used, stored, and protected, and how users can request deletion.

1. Google User Data and Other Information We Access

Depending on how an authorized household member interacts with services on costellos.org, Costello Family may access the following categories of data:

• Google Sign-In Profile Data: When an authorized household member signs in with Google OAuth 2.0 / OpenID Connect, Costello Family accesses basic Google account identity fields—including name, email address, Google account identifier, and profile picture URL—to verify the user against an explicit household allowlist.
• Personal and Family Google API Data: When an authorized household member explicitly connects a Google integration to personal or family tools running on this home server, Costello Family accesses only the Google data covered by the specific OAuth scopes granted by that user. Depending on the integration authorized, this may include Google Calendar calendars and events; Google Drive files, Docs, Sheets, and Slides; Gmail messages, threads, drafts, and labels; Google Contacts / People directory entries; and Google Chat messages.
• Technical and Security Logs: For visitors and authenticated users alike, our reverse proxy and authentication gateway record standard request metadata (IP address, timestamp, requested URL, HTTP status code, and user-agent string) to maintain server security and diagnose connectivity issues.

2. How We Use Google User Data

Costello Family uses Google user data solely to provide and operate user-facing household functionality requested by authorized family members, specifically:

• Authenticating authorized Costello household members via single sign-on (SSO) across self-hosted applications on costellos.org;
• Running personal and family integrations, home automations, schedule views, notifications, and document or email workflows explicitly configured or initiated by the authorized user;
• Protecting the home server against unauthorized access and troubleshooting operational errors.

3. Limited Use and Artificial Intelligence / Machine Learning Restrictions

Costello Family's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We limit our use of Google user data strictly to providing or improving the user-facing household features described above. Google user data is never used for:

• Targeted, personalized, retargeted, interest-based, or user advertisements;
• Selling data or providing data to data brokers or information resellers;
• Determining credit-worthiness or lending purposes;
• Building commercial or third-party databases;
• Developing, improving, or training generalized or non-personalized artificial intelligence (AI) or machine learning (ML) models. Google Workspace APIs and any Google user data accessed through them are not used to develop, improve, or train generalized or non-personalized AI and/or ML models.

4. Data Sharing, Transfer, and Disclosure

We do not sell, rent, license, or trade personal information or Google user data to any third parties.

We do not transfer or disclose Google user data to third parties for purposes other than providing the user-requested household functionality described in this Privacy Policy (for example, communicating directly with Google APIs at an authorized user's direction, transmitting user-configured personal automation requests initiated by that user, or complying with applicable legal obligations). Under no circumstances is Google user data transferred to third parties for advertising, data brokering, credit or lending decisions, or training generalized AI or ML models.

5. Data Protection and Security Mechanisms

Security procedures and technical safeguards are in place on the home server to protect the confidentiality and integrity of Google user data and sensitive credentials:

• Encryption in Transit: All external web traffic to costellos.org and all communication with Google APIs are encrypted using HTTPS/TLS with HTTP Strict Transport Security (HSTS).
• Credential and Secret Protection: OAuth client secrets, tokens, and service credentials are stored encrypted in an internal secret management vault rather than in plaintext files, and are injected only into the isolated workloads that require them.
• Access Controls and Isolation: Hosted applications run in isolated, non-root containers behind an identity-aware proxy restricted to an explicit allowlist of verified Costello household accounts.

6. Data Retention and Deletion

Account profile records, OAuth tokens, and cached integration data are retained on the private home server only for as long as an authorized household member's account or integration remains active and needed to fulfill the purposes outlined in this Privacy Policy. Reverse-proxy and authentication logs are rotated and deleted automatically after a short operational retention period. When data is no longer needed for these purposes, it is deleted from the server.

Users can revoke Costello Family's access to their Google account at any time from their Google Account Permissions settings. Users may also request deletion of their account record, stored OAuth tokens, or any personal data held on this server at any time by emailing privacy@costellos.org. Verified deletion requests are completed promptly and within 30 days.

7. Changes to This Privacy Policy and Contact Information

We keep this Privacy Policy current. If we change how Costello Family accesses, uses, stores, or shares Google user data, we will publish the updated policy at https://www.costellos.org/privacy, update the effective date at the top of this page, and notify authorized household members directly.

For questions about this Privacy Policy or to submit a data deletion request, contact privacy@costellos.org.