Privacy Policy

1. About this app

Ch13 Control Panel (the "BK app") is a bankruptcy case-management tool used by law-firm staff to track Chapter 13 and Chapter 7 matters, deadlines, documents, client communications, and court notices. MyECF Mail Flow is a feature of the BK app that lets an authorized firm connect a Gmail mailbox so that court electronic-filing (ECF) notice emails can be imported, sorted, and linked to the firm's matters.

This app is intended for use by authorized law-firm personnel. It is not directed to children.

2. Information we collect

Account and firm information. Staff name, login email, role, and the firm the account belongs to.

Case and client information. Information firm staff enter or import about matters, such as debtor names, contact details, case numbers, court and trustee details, deadlines, notes, tasks, accounting entries, and documents uploaded by staff or by clients through firm-issued portal links.

Connected Gmail information (MyECF Mail Flow). When a firm connects Gmail, the app stores:

• The connected Gmail address and connection settings (for example the sync source, the watched label if one is set, and the last sync time and status).
• OAuth access and refresh tokens issued by Google, used only to let the app read the connected mailbox on the firm's behalf.
• A Gmail sync checkpoint (history ID) and a list of message IDs the firm has deleted, so those messages are not re-imported.
• For each imported email: the sender and recipient addresses, subject, received time, Gmail message and thread IDs, and the first 3,000 characters of the plain-text body. The app also derives fields from the message such as case number, client name, hearing or deadline dates, and an event category.

Based on our review of the sync implementation, the app does not download email attachments and does not change, send, label, or delete messages in the connected Gmail mailbox through this integration.

3. Gmail permissions we request and how they are used

MyECF Mail Flow (per-firm connection): the app requests two Gmail permissions for this feature:

• gmail.readonly: lets the app read messages in the connected mailbox (headers and body) so ECF notice emails can be imported into MyECF Mail Flow.
• gmail.labels: lets the app see the mailbox's labels so the firm can choose to limit syncing to a particular label (for example "ECF Notices").

Imported email content is used to display court notices to authorized firm staff, classify them using rules configured by the firm, match them to matters, and support case workflows (for example calendar and deadline review, and creating follow-up work items). We do not use Gmail data for advertising, and we do not sell it.

Create Gmail Draft (separate shared connector): a separate, optional feature can insert a rendered document as a draft in a Gmail account. This uses a different, platform-level Gmail connection authorized by a workspace administrator, not the per-firm MyECF Mail Flow connection. It calls the Gmail API only to create drafts; it does not send email. This connector is currently not authorized, so the feature is inactive. If it is activated, it is governed by the same Limited Use commitments below.

4. Who can access imported information

Access is limited to signed-in users who are active members of the same firm. Imported records are tagged with the firm that owns the connection. Firm staff with access to MyECF Mail Flow can view, search, link, and delete imported items for their firm. Platform administrators and support personnel of the hosting platform may also have technical access to stored data as part of operating the service.

5. Service providers and sharing

• Hosting and database: the app runs on the Base44 platform, which stores application data and runs its backend functions.
• Google: the app calls Google's OAuth and Gmail APIs to authorize and read the connected mailbox.
• Resend: when firm staff send emails to clients from the app (for example client notices or signature requests), those messages are delivered through Resend. This is separate from reading the Gmail mailbox.

Imported Gmail content is shown to authorized firm staff. If staff choose to send a message, notice, or document to a client or other party from the app, the content they choose to include is shared with that recipient. We do not otherwise disclose Gmail user data to third parties, except as required by law, to protect rights and safety, or as part of a business transfer.

6. Disconnecting Gmail, revoking access, and deleting data

Disconnecting is not deleting. These are separate actions:

• Disconnect (in MyECF Mail Flow, email connection settings): clears the stored OAuth tokens and the sync checkpoint and marks the connection disconnected. The connection record and all previously imported emails remain in the app.
• Delete an imported email: firm staff can delete individual imported items in MyECF Mail Flow. The message ID is remembered so it is not re-imported by later syncs.
• Delete a connection record: removes the connection settings and stored tokens. It does not by itself delete previously imported emails.
• Revoke Google access: you can remove the app's access at any time from your Google Account at myaccount.google.com/permissions. Revoking stops the app from reading the mailbox; it does not delete data already imported.
• Request deletion: to request deletion of imported data (or of data tied to a Gmail address), email danay.machado@gmail.com from the address involved or through the firm's administrator. We will confirm what can be removed; some records may be retained where the firm needs them for its legal-practice records.

7. Retention

The app does not currently apply an automatic expiration period to imported emails or case records. Imported items remain until firm staff delete them or a deletion request is carried out. Retention schedules and backup retention are not defined in the application and need operator review.

8. Security

Access to the app requires sign-in, and data access is restricted by firm membership. OAuth tokens received from Google are stored by the platform as part of the EmailSyncConnection record. The storage fields are named "encrypted," but the app does not apply additional application-level encryption to the token values before storing them. Communication with Google and the platform uses HTTPS. No system is perfectly secure, and we do not guarantee absolute security. We do not claim any security certification or audit.

9. Google API Services User Data Policy

The BK app's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Gmail data is used only to provide and improve the user-facing MyECF Mail Flow features described above.
• Gmail data is not transferred to others except to provide those features, to comply with law, or as part of a merger or sale with notice.
• Gmail data is not used for advertising, and is not sold.
• Gmail data is not used to develop, improve, or train generalized AI or machine-learning models.
• Humans do not read Gmail data except with the user's consent, for security purposes, to comply with law, or as needed within the firm's own authorized use of the app.

10. Changes to this policy

We may update this policy. If we change how Google user data is used, we will update this page and, where required, ask for consent again. The effective date above shows the latest version.

11. Contact

Privacy and support: danay.machado@gmail.com