Public website and private operator connection · October 20, 2026

Privacy notice

This notice covers the public OneShot preview website at oneshot.services and the separate private AOW operator Gmail connection described below. Customer formation accounts and paid orders are not open on this website.

Who operates this website

OneShot is operated by Art Official Works LLC. You can contact us at oneshot.llc@proton.me about privacy questions.

Mailing/correspondence address
Art Official Works LLC · OneShot
5900 Balcones Dr, Ste 100, Austin, TX 78731
Mailing/correspondence only; not a storefront.

Information handled by this preview

This public preview has no account registration, application intake, payment form, advertising trackers, or analytics scripts. Our hosting provider, Cloudflare, handles technical request information such as IP addresses, browser information, requested pages, and security signals to deliver and protect the website.

If you email us, we receive your email address, the contents of your message, and any information you choose to include. We use that information to respond and maintain a record of support correspondence. Please do not email Social Security numbers, identity documents, payment-card details, passwords, or other sensitive application information.

Service providers and disclosures

Cloudflare provides website hosting and security. Proton provides the customer-support mailbox. These providers process information needed to deliver their services. We do not sell personal information collected through this preview. We may disclose information when required by law or reasonably necessary to address security, fraud, or legal claims.

Retention and your requests

We retain correspondence as needed to respond to requests, operate the business, and meet applicable obligations. Technical data retention is also governed by our hosting provider’s service settings and policies. Contact us to request access, correction, or deletion of information you have provided. We may need to verify the request and retain records required by law.

Separate AOW operator Gmail connection

This section covers the private OneShot Operations connection for Art Official Works LLC’s designated operator mailbox, artofficialworks@gmail.com. It is separate from customer Google sign-in and ChatGPT’s Gmail connection. It does not request access to customer Gmail accounts or make the customer formation service available.

The prepared connection requests Google’s https://www.googleapis.com/auth/gmail.readonly permission and offline access. Gmail read-only permission covers the whole mailbox, including message bodies; Google does not limit this grant to Texas messages or a particular sender. Offline access allows OneShot to renew access after website sign-out. The currently available connection feature only verifies the approved account through its Gmail profile. It does not retrieve or display messages, send email, or perform government login. Reading a Texas login email for an authorized, current challenge is a proposed use that is not active. This notice does not establish that a Google grant has been connected or that the proposed use has been qualified.

Use, storage and sharing

For this connection, OneShot handles the approved mailbox identity, authorization and refresh tokens, and connection status and audit records. Google provides authorization and the account-profile response. Cloudflare processes the connection on OneShot’s behalf; tokens are encrypted in server-side storage using a separate operator credential key, distinct from customer and tax-identifier protection. The current connection does not provide email contents to people, ChatGPT, or another AI model. We do not sell Google user data, use it for advertising, or use it to train AI or machine-learning models. No broader customer Gmail access is included.

OneShot will handle information received through Google Workspace APIs in accordance with the Google Workspace API User Data and Developer Policy, including its Limited Use requirements. This is our data-use commitment, not a claim of Google verification or approval.

Ending access, retention and recovery

Website sign-out ends the browser session but does not revoke offline access. Use Disconnect locally now in the operator mailbox screen to stop this application’s use of the connection. Google revocation is a separate action: it can invalidate this account’s grants across all OAuth clients in the selected OneShot Operations project. The screen requires a separate acknowledgement for that action and distinguishes confirmed revocation from an uncertain result. The operator can also remove the connection through the Google account’s third-party access controls.

An External/Testing grant has a fixed seven-day local-use deadline starting when it is accepted. Refreshing a token does not extend that deadline. A separately reviewed private AOW-only External/In production policy can permit renewal without that fixed local limit, but only after the previous grant is removed and a new consent flow is completed. Changing policy does not convert or extend a Testing grant. The operator screen identifies the configured policy. Configuration and publication do not establish Google verification, exception eligibility, or successful future renewal. A missing provider expiry remains unknown; Google can revoke or reject either type of grant at any time. Connected status describes saved custody, not a continuous provider-access check. Expiry blocks local account access; it does not prove Google revoked the grant or that stored records were deleted. After local disconnection, encrypted refresh-token material may be retained solely to attempt revocation for up to 24 hours. It becomes unusable for that purpose at the deadline; physical cleanup in the active connection store occurs on the next explicit connection request. There is no background cleanup process, so we do not promise deletion at the instant the deadline passes. Connection and audit records may remain after token cleanup; provider recovery copies are subject to Cloudflare’s retention settings.

If the credential key is lost or a database is restored, recovery stops local access and discards the affected local credentials instead of restoring usable access. That does not remove Google’s grant. The operator must separately remove and review the old Google grant before a fresh consent flow; recovery does not silently reconnect the mailbox. For help with access removal or a data request, contact oneshot.llc@proton.me. Do not include passwords, tokens, authorization codes, or email verification codes in a support message.

When the customer service launches

Formation services will require a separate account and additional information. Before collecting that information, we will provide the applicable service privacy information, including how documents, filings, and any required tax identifiers are handled. This public preview does not collect those details.

Links and updates

Other websites and services have their own privacy practices. We may update this notice as the website or service changes; the date above identifies this version.