Privacy policy

1. Application and operator

Agent AI Gmail Agent is a private, noncommercial Python application operated on a privately managed Synology NAS for personal Gmail organization. It is not offered as a public service and does not accept public account registrations. The operator can be contacted at the email address above.

2. Google OAuth and data access

The agent uses Google OAuth to obtain permission to access the authorized Gmail account through the official Gmail API. It does not ask for or store the Google account password. Requested permissions must be limited to those needed for the enabled features and are displayed during Google authorization.

Depending on the configured rules, the agent accesses message identifiers, labels, headers (such as sender, subject, and date), message content, and attachment metadata (such as filename, type, and size) to match messages and identify attachments for review. Attachment-review labeling does not require uploading attachments to this website or a third-party AI service.

3. How information is used

Data is used to apply promotional labels and archive matching promotions, archive USPS Informed Delivery daily emails, and label messages with attachments for manual review. Archiving removes the inbox label; messages remain in All Mail and continue to use Gmail storage. The agent does not automatically delete messages or attachments, send email, or make purchases.

4. Local processing, storage, and retention

Processing takes place on the operator’s private Synology NAS. Gmail messages remain in the Google account unless the user changes them manually. OAuth tokens and any local configuration, working data, or operational logs are held on the NAS rather than on this public website. The operator is responsible for protecting the NAS and restricting access to these files.

Local data should be kept only while needed for the disclosed workflows or troubleshooting and removed when no longer needed. To stop use, stop scheduled runs, revoke Google access, and remove the agent’s local tokens, caches, and logs. Revocation alone does not erase local files, reverse existing labels or archives, or remove copies in NAS backups. The operator must also remove retained backup copies according to their backup configuration.

5. Sharing and third-party AI

The current version does not transmit Gmail content, attachments, or data derived from Gmail to third-party AI providers. Google receives API requests needed to perform the authorized mailbox actions. Gmail data is not sold or used for advertising, credit decisions, or general-purpose AI model training. This website’s hosting provider does not receive the agent’s Gmail data through the site.

6. Google API Limited Use

The agent’s use and transfer of Google API data adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Google data, including derived data, is used only to provide or improve the prominently disclosed user-facing features. Transfers are restricted to policy-permitted purposes: those features with user consent, security, legal obligations, or a business transfer with prior explicit consent. Human access requires affirmative agreement to specific data or another policy-permitted exception for security, law, or aggregated internal operations. Other uses, transfers, and sales are prohibited.

7. Revoking access and controlling your data

You can remove the agent’s authorization in Google Account third-party connections. This prevents further authorized API access, but changes already made to the mailbox remain. You can also stop the agent on the NAS, change its rules, and manually remove labels or return archived messages to the inbox. Contact the operator for help with local data removal.

8. Website visits

This static informational site contains no login, mailbox connection, contact form, analytics script, or advertising tracker. It sets no application cookies. Cloudflare, as the website host, may process request information such as IP addresses and technical logs to deliver and secure the site under its privacy policy. External links are governed by the destination’s policies.

9. Changes and questions

This policy must be kept aligned with the deployed agent. Before introducing materially different Google-data uses, the operator will update disclosures and obtain any required renewed consent. Send privacy or data-removal questions to the operator contact above.