Privacy policy

Last updated October 7, 2026

Frontdesk is an assistant used by the staff of Gameday Men's Health Brampton ("the clinic"). It is operated for the clinic by Dipen Nagpal. This policy explains what information Frontdesk uses, why, and how it is protected.

Google account information

With the clinic's permission, Frontdesk connects to the clinic's own Google Workspace account, using Google's sign-in. It is given access only to what the clinic's features need:

• Gmail: to read email sent to the clinic's mailbox, and to draft and send email on the clinic's behalf (for example replies to enquiries and the clinic's scheduled staff emails).
• Google Calendar and Google Drive: to read and update the clinic's own calendar and files when the clinic's staff ask it to.
• Google Cloud Pub/Sub: to be told when new email arrives.

Frontdesk uses this information only to provide these features to the clinic. It does not sell it, does not use it for advertising, and does not share it with anyone except as described below.

Frontdesk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Other information

Frontdesk also handles the messages, appointments and contact details that the clinic already keeps in its own systems (its client management and booking software), so that it can answer enquiries and keep the clinic's team informed.

Who processes it

• Google Cloud (Montréal, Canada), where Frontdesk runs and stores its data.
• AI model providers, through their APIs, which process message text only to produce Frontdesk's replies and summaries.
• The clinic's own software providers, when Frontdesk acts in those systems for the clinic.

Security

Data is encrypted in transit and at rest. Sign-in tokens and other credentials are encrypted with keys held in Google Cloud's key management service, and access is limited to the people who run Frontdesk for the clinic.

Keeping and deleting information

Frontdesk keeps information only as long as the clinic needs it for its work. The clinic can remove Frontdesk's access to its Google account at any time from its Google Account permissions, and can ask for its information to be deleted by writing to the contact below.

Changes and contact

If this policy changes, the new version will be posted on this page with a new date. Questions or requests: dipennagpal@gmail.com.