How the SDS application handles your data

Overview

Maldo & Associates provides Lab Clean SDS Review Automation, a desktop application that helps authorized users process incoming safety data sheets, generate branded drafts, and place those drafts into a designated Dropbox Review folder. This policy explains how the application accesses, uses, stores, and shares information.

Google data the application accesses

After a user grants permission, the application uses the Gmail API with read-only access. It may read Inbox message metadata, subjects, message bodies, and supported PDF or DOCX attachments when they are relevant to the SDS workflow.

The application does not send email, delete email, mark messages as read, move messages, or otherwise modify Gmail account data.

How information is used

Google user data is used only to:

• identify messages containing safety data sheet documents;
• download and preserve source messages and supported attachments;
• extract SDS content and match it to authorized active-product records;
• generate branded SDS drafts; and
• prevent the same message from being processed repeatedly.

Processing by service providers

The application first attempts deterministic document parsing on the user’s device. When a complete source document cannot be parsed, the document may be sent to the Anthropic API for transcription. Generated SDS drafts are uploaded through the Dropbox API to the user-designated Review folder. These services process data only to provide the requested application functions and are subject to their respective terms.

Storage and retention

Source messages, attachments, processing records, and generated files may be stored on the user-controlled computer. Generated documents are stored in the user-controlled Dropbox account. Data remains in those locations until the user or account administrator deletes it according to their organization’s retention practices.

Sharing, selling, and advertising

Maldo & Associates does not sell Google user data. Google user data is not used for advertising, credit decisions, or unrelated analytics. It is disclosed only to the service providers described above as needed to operate the SDS workflow, when directed by the user, or when required by law.

Security and user control

OAuth credentials and service credentials are stored on the authorized device rather than embedded in generated SDS documents. Users can revoke Google access at any time from their Google Account permissions. Human review is required before generated SDS drafts are released.

Google API Services User Data Policy

The application’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

Questions or requests concerning this policy may be sent to tomamaldonado@gmail.com.