<?php
$pageTitle = "Is FamGateway Safe? Privacy and Legal Policy";
$blogKicker = "Trust & Legal";
$blogLead = "Understanding our strict privacy policy and legal compliance to keep your data perfectly secure.";
include 'includes/blog-header.php';
?>
      <p>When merchants first discover FamGateway, they often ask: <em>"If I connect my Gmail App Password, are you reading my personal emails?"</em></p>
      <p>The short and definitive answer is: <strong>Absolutely not.</strong> Privacy isn't just a promise; it is hardcoded into our architecture. Below, we break down exactly how our systems operate to ensure 100% legal compliance and data security.</p>
      
      <h2>1. Strictly Scoped IMAP Filtering</h2>
      <p>When our stateless PHP engine connects to your Gmail account via the IMAP protocol, it does not download your entire inbox. Instead, it issues a highly specific server-side search query directly to Google:</p>
      
      <div class="highlight" style="font-family: monospace; font-size: 14px;">
        UNSEEN FROM "fampay.in" OR FROM "famapp.in"
      </div>

      <p>This means Google's servers <strong>only</strong> transmit emails originating from official FamPay domains. Our servers are entirely blind to any other emails—personal, promotional, or otherwise. They literally never reach our infrastructure.</p>

      <h2>2. Zero Data Retention Policy</h2>
      <p>Even for the FamPay transaction receipts that we do fetch, we employ a strict <strong>Zero Data Retention Policy</strong>.</p>
      <p>The email body is held temporarily in RAM (server memory) just long enough to run a Regular Expression that extracts the <code>Order ID</code> and <code>Amount</code>. Once the webhook is fired to your application, the email data is instantly discarded. We do not store, log, or save the contents of your emails in our database.</p>

      <h2>3. The Power of App Passwords</h2>
      <p>You never provide us with your actual Gmail password. Instead, you generate a 16-character <strong>App Password</strong>. This acts as a revocable API key.</p>
      <p>You remain in complete control. If you ever want to sever FamGateway's access, you simply delete the App Password from your Google Security Dashboard. The connection will instantly drop, and we will have zero ability to reconnect.</p>

      <h2>4. Legal Compliance & Authority</h2>
      <p>Because our system is mathematically restricted to fetching only transactional business receipts, we operate in full compliance with data privacy regulations. We respect your digital boundaries.</p>

<?php include 'includes/blog-footer.php'; ?>
