How Home Assistant handles Google account data

Information processed

The service may process the following categories of information:

• Basic Google account information needed to identify the signed-in user.
• OAuth access tokens and refresh tokens granted during authorization.
• Minimal operational logs needed for security, troubleshooting, and abuse prevention.

How information is used

Information is used only for the operation of the Home Assistant integration, including:

• Authenticating approved users with Google.
• Enabling the Google APIs or account permissions explicitly requested by the integration.
• Maintaining security, diagnosing faults, and protecting the service from misuse.

Sharing and disclosure

Data is not sold. Information is shared only when necessary to complete the Google OAuth flow, to operate the supporting hosting infrastructure, or when disclosure is required by law.

Retention

Data is retained only for as long as needed to keep the integration working, maintain security records, or satisfy legal obligations. Users can revoke Google account access at any time through their Google account permissions settings.

User choices

Users may stop using the service at any time and may revoke the app’s access from the Google account permissions page. Once access is revoked, future processing through Google OAuth stops unless a new authorization is granted.

Policy updates

This policy may be updated when the integration or regulatory requirements change. Material updates will be reflected on this page.