Oxbow Project Hub
Privacy Policy
Effective September 29, 2026
Oxbow Associates, Inc. operates Oxbow Project Hub for its authorized staff. This policy explains how the Hub accesses, uses, stores, and shares information, including information obtained through Google APIs.
Information we access
- Google sign-in: account identifiers, email address, name, and profile information provided during authentication.
- Google Calendar: the list of calendars available to a connected account and events from selected work calendars, including titles, times, locations, descriptions, and event identifiers.
- Gmail sending: the connected sender’s account identity and permission to send messages. This integration requests send-only permission; it does not request access to read your inbox.
- Hub records: staff details, project and client information, assignments, notes, documents, feedback, and activity records entered into the application.
How we use information
We use account information to authenticate approved users and apply access permissions. We use selected calendar events to show team availability and schedules. For assigned field visits, the Hub creates, updates, or removes events on connected work calendars and reconciles scheduling changes made in Google.
The configured Gmail sender sends work-related notifications and documents to recipients selected through Hub workflows. The Hub stores authorization tokens so these connections can work without repeatedly requesting sign-in.
Sharing and visibility
Selected work-calendar events are visible to other authorized Hub users as part of the shared schedule. Connect a work calendar containing information appropriate for team visibility. Project data is visible according to Hub permissions. Messages and attachments sent through the Hub are disclosed to their addressed recipients.
Google processes authentication, calendar, and email requests. Infrastructure providers supporting hosting, private networking, storage, and backups may process information needed to provide those services. We do not sell Google user data, use it for advertising, or use it to train generalized artificial-intelligence or machine-learning models.
Oxbow Project Hub’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and security
The Hub runs on Oxbow-controlled infrastructure with account-based access and a private network. Connected Calendar and Gmail refresh tokens are encrypted at rest. HTTPS protects web connections. Database records and relevant configuration are backed up for recovery. No system can guarantee absolute security.
Retention and deletion
Operational records are retained while needed for project administration, business recordkeeping, and applicable obligations. Disconnecting Google does not automatically delete existing project records, copies already delivered to recipients, or backups. To request deletion of stored Google-derived information or account data, contact us. We will review requests and explain any information that must be retained. Backups expire under the configured retention schedule.
Your choices
You may choose or change your connected work calendar in the Hub. You can revoke Google access through your Google Account connections. Revocation stops future access using that authorization but does not automatically remove existing Hub records or Google events. Contact the administrator for help disconnecting a service or removing stored information.
Public website
This informational website does not require a Hub account. The hosting provider may process basic request information, such as IP address and browser details, to deliver and secure the website. These pages do not include advertising or analytics scripts.
Contact and updates
Privacy questions and requests: kjcormier29@gmail.com. We may update this policy as the application changes; the effective date above identifies the current version.