Westport

Privacy Policy

Last updated October 26, 2026

This Privacy Policy explains how McCoy & Lykins (“we”, “us”) collects, uses and protects information in Westport (https://westport.mccoyandlykins.com), our private operating platform for records, documents, contacts and financial reporting. Westport is used by McCoy & Lykins and the people we approve. It is not a public service.

1. Information we collect

  • Account information. When you sign in with Google we receive your name, email address and profile picture. Only approved email addresses can use Westport.
  • Content you add. Documents, records (entities, agreements, decisions, opportunities, financial accounts), contacts, companies, activity notes and chat conversations.
  • Gmail data. If a user connects a Google account to the Email feature, Westport reads and displays that account’s messages, labels and attachments live when the user opens them, and sends messages the user composes. Westport does not store email content in its database; the AI assistant, when asked, reads it live in the same way.
  • Connection credentials. To keep a Google connection active we store the OAuth access and refresh tokens Google issues to us. We never see or store your Google password.
  • Activity logs. A record of changes made in Westport (who, what, when) so changes can be reviewed and undone.

2. How we use information

  • To provide Westport: sign you in, store and search your records and documents, and show cash position and profit by company.
  • To answer questions and make requested changes through the built-in AI assistant.
  • To secure Westport, prevent misuse and keep an audit trail.

We do not sell personal information or Gmail data. We do not use them for advertising, and we do not share them with data brokers.

3. Gmail and Google user data

Westport requests the Gmail permission to read, label, archive, trash and send mail (the gmail.modify scope), solely to provide the Email feature to the user who connected the account. We use Gmail data only to display it to that user and to carry out actions the user requests. We do not sell it, use it for advertising, or transfer it to others except as needed to provide the feature, to comply with law, or with the user’s consent. No person at McCoy & Lykins reads a user’s email except as the user directs or where required for security, to comply with law, or with consent. Gmail content is sent to the AI assistant only when the connected user asks the assistant to search or read their email, or pastes it into chat. In that case the relevant messages are sent for that request to the AI provider described below, solely to answer the user, and are not retained in Westport’s chat history. We do not use Gmail data to develop, improve or train generalized AI or machine-learning models, and we do not allow others to. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. A user can disconnect an account in Westport (Email, then Disconnect), which deletes the stored tokens, or revoke access at any time from their Google Account’s security settings.

4. AI processing

Westport includes an AI assistant and document-analysis tools. When you use them, the text of your message and the records, documents or figures needed to answer it (which can include email messages when you ask the assistant about your mail) are sent to an AI model provider through OpenRouter. Model providers we may select include Anthropic and DeepSeek. We send only what is needed for the request, we do not use your content to train our own models, and we configure these services for service delivery rather than advertising. Each provider handles data under its own terms. If you do not want your content processed this way, do not use the assistant or document-analysis features.

5. Who we share information with

We share information only with service providers that run Westport for us, and only as needed to operate it:

  • Supabase, which hosts our database, file storage and authentication (United States).
  • Google, for sign-in and, when a user connects an account, Gmail.
  • OpenRouter and the model providers described above, for AI features.
  • Our web hosting provider, which serves the application.

We may also disclose information if required by law or to protect rights, safety or security. We do not otherwise share information with third parties.

6. Security

Data is transmitted over TLS and stored by our database provider with encryption at rest. Access is limited to approved users through Google sign-in, and database access rules restrict every table to approved members. Google connection tokens are kept in a restricted table that is not readable through the normal data interface. No system is perfectly secure, but we work to protect your information and will notify affected users as required if we learn of a breach.

7. Retention and deletion

We keep content for as long as McCoy & Lykins needs it for its business and legal obligations. Disconnecting a Google account deletes its stored tokens. To have your account information or other personal data deleted, contact us at the address below.

8. Your choices

You can request access to, correction of or deletion of your personal information, or ask us to disconnect a Google account, by emailing us. Depending on where you live you may have additional rights under local law, and we will honor requests as required.

9. Children

Westport is a business tool and is not directed to anyone under 18. We do not knowingly collect information from children.

10. Changes

We may update this policy. The date at the top shows when it last changed. If a change is significant we will tell Westport users.

11. Contact

McCoy & Lykins, Kansas, United States
Email: parker@parkerijohnson.com