Expiry Watch — Privacy Policy
Last updated · 22 September 2026
What Expiry Watch stores, why, and how to get rid of it. It holds whatever you type into it, which may include people's names.
1. Who we are
Expiry Watch is published by Ultramar Labs LLC, a custom-software practice in Dallas–Fort Worth. Questions about this policy, or a request to delete data, go to hello@ultramarlabs.io and are answered by a person.
2. What the app can see
Expiry Watch requests one permission, `chat.bot`, and Google classes it as non-sensitive. It lets the app read messages addressed to it and post its own replies. It does not grant access to your Gmail, Calendar, Drive, contacts, or to conversations the app is not part of. The app cannot read a space it has not been added to, and it cannot read messages in a space that are not directed at it.
3. What we store
Three things. The Google Chat space identifier, which is how your list is kept separate from every other space's. The entries you create — the label you typed, the expiry date, and the identifier of the Chat user who added it. And a short activity log of what happened and when, so a missed reminder can be explained rather than guessed at. We do not store the content of messages that are not commands to the app.
4. Names, and why this policy exists
The label is free text, and in practice people type things like “Dave's forklift licence”. That means the app can end up holding personal information about your staff even though it never asks for any. We would rather say so plainly than claim the app holds nothing personal. Do not put more in a label than you need — a name and a document is enough, and the app never requires either.
5. Where it lives, and who else touches it
In the United States. The app runs on Google Cloud Run in us-central1; the database is Supabase, hosted on AWS in us-east-2, with row-level security enabled and enforced on every table. Those two companies and Google Chat itself are the only third parties involved. There are no analytics, no advertising trackers, and no third-party services beyond those.
6. What we never do
We do not sell your data, share it, or use it to train any model — ours or anyone else's. We do not read your watchlists to build anything, and we do not aggregate across spaces.
7. How long we keep it
Entries stay until you mark them done or remove the app. Removing Expiry Watch from a space stops every reminder immediately, and the stored entries are deleted 90 days later — the delay is deliberate, so that removing the app while tidying up does not destroy a year of renewal dates before anyone notices. The activity log is kept 90 days. Both are deleted by a job that runs hourly, not by hand. Ask us to delete everything sooner and we will, within seven days, and confirm when it is done.
8. Your administrator
If Expiry Watch was installed by your Google Workspace administrator, they control whether the app remains available and can remove it for everyone. They cannot read your space's watchlist through us.
9. Changes
If this policy changes in a way that affects what is collected or who can see it, the app posts a notice in every space it is installed in before the change takes effect. A quiet edit to a web page is not notice.