Privacy Policy

This Privacy Policy explains how MyCommandStation handles information when you connect supported smart-home services and devices, including Google Nest.

Google API Limited Use
MyCommandStation’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Information MyCommandStation Accesses
MyCommandStation accesses information only after you authorize a supported service or device provider. For Google Nest, this may include information about home structures, rooms, devices, device names and identifiers, and supported device traits or status needed to display and control the devices you authorize.
Depending on the device and permissions granted, this may include thermostat information such as operating mode, temperature settings, fan state, Eco state, device status, and other supported information made available through Google’s official Smart Device Management API.

How We Use and Share Information
Information obtained from connected services is used to provide MyCommandStation features requested by the user, including displaying device state, controlling authorized devices, maintaining device connections, synchronizing state, and supporting related home-automation functionality.
MyCommandStation does not sell Google user data. Google user data is not shared with advertisers, advertising networks, data brokers, or information resellers and is not used for advertising, credit decisions, or unrelated marketing purposes.
Information may be disclosed when necessary to provide a service requested by the user, protect the security of the service, comply with applicable law, or where otherwise permitted by the applicable provider policies and user authorization.

Google Account Authorization and Security
Connecting Google Nest requires you to sign in with your own Google account and explicitly authorize MyCommandStation through Google’s authorization process. You choose which supported structures and devices to make available to MyCommandStation.
MyCommandStation does not receive or store your Google account password. Google provides authorization credentials that allow the MyCommandStation Host to access only the Google Nest information and capabilities you have authorized.
OAuth access and refresh credentials used for connected services are protected by the MyCommandStation Host and are used only to maintain authorized access to those services. MyCommandStation is designed to limit access to connected-service information to what is necessary to provide its user-facing functionality.

Data Storage and Retention
MyCommandStation retains information only as necessary to provide its device-management and home-automation functionality and to maintain authorized device connections. Google Nest information is handled subject to applicable Google Device Access data-retention requirements.
Stable identifiers and names may be retained where permitted so that MyCommandStation can continue to recognize devices and maintain their configured identity.

Revoking Access and Your Choices
You control which supported services and devices you connect to MyCommandStation. You may disconnect a provider, revoke authorization, or remove supported devices from MyCommandStation when the applicable integration allows it.
You may revoke or modify MyCommandStation’s access to Google Nest through Google’s Partner Connections Manager or through your Google Account permissions.
When authorization is revoked, MyCommandStation will no longer be able to retrieve new information from that provider once the authorization is no longer valid, and associated Google user data will be handled as required by applicable Google Device Access policies.

Changes to This Privacy Policy
This Privacy Policy may be updated as MyCommandStation adds or changes supported integrations, functionality, or data-handling practices. Material changes will be reflected on this page.

Contact
Questions about this Privacy Policy or MyCommandStation’s handling of connected-service information may be sent to:
[email protected]
Effective date: September 18, 2026