MediShield — Privacy Policy (Agent Email Integration)

Connecting Google accounts to the platform

This section applies to users of the MediShield technology platform: independent marketing agents and company employees. It does not apply to end customers.

Which permissions the platform requests, and why

1. Sign in with Google (openid, email, profile): to identify the user when signing in to the platform. The platform receives only the user's name, email address and profile picture.
2. An agent's personal email account: https://www.googleapis.com/auth/gmail.send (send-only). This permission allows a message to be sent only when the agent clicks a send button in the platform, for example to send a signed document to an insurance company. It does not permit reading the mailbox or accessing existing messages, drafts, contacts or calendar.
3. The company's own mailboxes (the policy cancellation mailbox and the agent appointment mailbox, owned by MediShield):
   • https://www.googleapis.com/auth/gmail.readonly: reading incoming messages, in order to capture replies from insurance companies and customers into requests in the platform;
   • https://www.googleapis.com/auth/gmail.send: sending documents to insurance companies from the mailbox, initiated by an authorized employee only.

   These permissions are granted only by a company administrator, and only for company accounts. They are never requested from an agent's account.

When sending occurs

Only in direct response to an explicit, intentional action by an authorized user of the platform. There is no automated, scheduled or background sending from an agent's account.

What data is stored, and where

• An OAuth refresh token, encrypted, in a secure vault on the platform's servers in the European Union (the Netherlands). It is used only to perform the action for which the permission was granted.
• The email address of the connected account.
• An audit record for each send: sender identity, recipient address, document identifier and timestamp.
• From company mailboxes only: incoming messages captured into requests in the platform.

The content of messages sent from an agent's account is kept in the agent's own mailbox and is not stored by the company.

Use and sharing

Data obtained through Google APIs is used solely to perform the actions described here. It is not sold, not transferred to third parties other than the infrastructure providers the platform runs on (which act as data processors on behalf of the company and under its instructions), not used for advertising or profiling, and not used to develop, improve or train generalized artificial intelligence or machine learning models. No human reads the data, except with the user's consent, for security purposes, or when required by law.

Limited Use disclosure

MediShield's use of information received from Google APIs, and its transfer of such information to any other app, will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revocation and deletion

The connection can be disconnected at any time: from the platform's settings screen, or at https://myaccount.google.com/permissions. On disconnection, the refresh token is deleted immediately and permanently, and the permission is also revoked at Google. Operational audit records are retained in accordance with the retention section of the full privacy policy (section 6).

Security

Tokens are stored encrypted, and all communication is encrypted with TLS. A user cannot send through another user's connection, and the platform verifies that each mailbox is connected only through that exact mailbox's own account.

Microsoft Outlook

If an agent connects a Microsoft account, exactly the same rules apply. The permission requested is send-only, with no read permission.

Contact

Email: info@medishield.co.il · Phone: 077-9915470