Privacy Policy

Trigger.dev Report Generator — effective 31 August 2026.

This policy explains what the Trigger.dev Report Generator ("the application") does with information it receives. The application is operated by Desmond Loy ("the operator") and published at periscopenotes.com.

Information the application receives

The application receives only what is typed into its intake form:

• a company name
• an industry
• a stated goal
• a stated challenge

The form does not ask for names, email addresses, telephone numbers, postal addresses, payment details, or any other personal information. There are no user accounts, no login, no cookies, no analytics, and no advertising or tracking technology on this website or in the application.

How that information is used

The four submitted fields are used for one purpose: producing a written brief about the company described. They are sent to the OpenAI API, which drafts the text. The resulting text is rendered as a Microsoft Word document and stored in the operator's own Google Drive.

Google user data

The application requests a single Google OAuth scope: https://www.googleapis.com/auth/drive.file.

This scope grants per-file access limited to files the application itself creates. The application cannot see, read, download, or modify any other file in the connected Google Drive account, including files created by the account holder or by other applications. It does not list the contents of the Drive, and it does not request access to Gmail, Calendar, Contacts, or any other Google service.

The access is used solely to create the folder that holds generated briefs, to upload each generated brief into that folder, and to remove test files the application itself created during setup.

The application's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: data obtained through Google APIs is not transferred to or sold to third parties, is not used for advertising, is not used to train generalised artificial-intelligence or machine-learning models, and is not read by humans except as necessary for security purposes, to comply with applicable law, or with the account holder's explicit consent.

Third-party services

• OpenAI — receives the four submitted fields in order to draft the brief. Submissions are sent through the OpenAI API. See the OpenAI privacy policy.
• Google Drive — stores the generated documents in the operator's own Drive account, under the narrow drive.file scope described above.
• Trigger.dev — runs the application's code and retains execution logs, which include the submitted fields, for operational troubleshooting. See the Trigger.dev privacy policy.

No other third party receives submitted information. Nothing is sold, rented, or shared for marketing purposes.

Retention and deletion

Generated documents remain in the operator's Google Drive folder until the operator deletes them. Execution logs are retained by Trigger.dev according to that service's own retention period. To have a submission and its generated document deleted, email the address below and identify the company name submitted.

Security

Credentials for OpenAI, Google, and Trigger.dev are held as environment variables in the operator's deployment and are not exposed by the application, logged, or included in generated documents. Data is transmitted to all three services over HTTPS.

Children

The application is a business tool and is not directed at children. It does not knowingly collect information from anyone under 13.

Changes

If this policy changes, the revised version will be posted on this page with a new effective date.

Contact

Desmond Loy — thefinancesanctuary@gmail.com