Privacy policy

Who operates the integration

Nest Hubitat is a personal-use integration operated by the owner of jansel.net for their own household. It is not offered as a public service. This policy covers the integration and this informational website.

Contact: nest-personal-use@jasonansel.com

Google data accessed

With the owner's consent, the integration accesses the Nest devices and home structures selected during Google's authorization flow. Data can include device and room names and identifiers, temperature, relative humidity, connectivity, thermostat operating state, modes, fan state and setpoints. It also receives authorized device-event messages through Google Cloud Pub/Sub.

The requested scopes are https://www.googleapis.com/auth/sdm.service and https://www.googleapis.com/auth/pubsub. The SDM permission can allow device control as well as reading data; the purpose of this installation is temperature and humidity monitoring. Camera and doorbell access are outside this installation's intended scope, and Google Drive image storage is disabled.

How data is used

Data is used to represent the selected thermostats on the owner's private Hubitat hub and keep their readings and state current. Authorization credentials are used to maintain the connection to Google and authenticate event delivery. Google user data is not sold, used for advertising, or used to train artificial-intelligence or machine-learning models.

Nest Hubitat's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Storage and service providers

Device readings, identifiers, settings, event history and authorization tokens are stored on the owner's Hubitat hub as required by the integration. Protected local setup files and hub backups may also contain credentials and configuration.

Google processes API requests and event messages. Pub/Sub delivers events through Hubitat's cloud relay to the private hub. Google and Hubitat therefore process data needed to provide these services. Access is intended for the owner and people the owner authorizes to administer the installation.

This informational website is hosted on Cloudflare Pages. It contains no thermostat data, Google authorization tokens or home-network addresses. Cloudflare may process visitor IP addresses, request details and security logs to deliver and protect the website, as described in Cloudflare's privacy policy. The site does not add analytics, advertising scripts, tracking cookies, contact forms or account sign-in.

Retention, revocation and deletion

The hub retains current device data and event history according to its configuration. Google Pub/Sub retains undelivered events according to the subscription settings. Tokens and configuration remain until removed or replaced; backup copies remain until the owner deletes them.

The owner can revoke the integration's Google access using Google Account connections or Google's Nest partner-connection controls. Revocation prevents continued authorized access, but does not automatically erase data already stored on the hub or in backups. To delete stored data, the owner can remove the integration's devices and settings and delete associated backup and local credential files. Existing history and cloud resources should be reviewed separately.

Changes and questions

This policy will be updated if the installation's data practices change. The effective date above identifies the current version. Questions or deletion requests can be directed to the operator using the contact information above.