Privacy policy

About this policy

Gmail Assist helps you manage Gmail, tasks, documents, and AI-assisted work. The operator of your deployment manages hosting, configuration, service providers, and operational access.

Information we process

When you connect Google, we receive your Google account identifier, email address, name, and profile information. Mail features access message content, headers, labels, attachments, and contact information. We also store workspace information such as tasks, documents, settings, chats, generated content, and scheduled work.

Authorization tokens, session cookies, browser caches, and diagnostic records support operation and security. Hosting infrastructure may process request metadata such as IP addresses.

How information is used

Data is used to authenticate you, synchronize and display mail, search and organize conversations, send messages and update mail as requested, and maintain your workspace. Offline Google access supports background synchronization and configured scheduled tasks while you are away.

AI providers and connected tools

AI features can send relevant email content, attachments, prompts, chat history, and workspace context to the deployment's configured AI provider. This may be OpenAI, OpenRouter, or another compatible provider. Automated analysis and scheduled agents may process data in the background when enabled. External tools may receive information needed for their tasks.

Ask your deployment administrator which providers and tools are enabled and what retention terms apply before using sensitive information. Providers process transferred information under their applicable terms and privacy policies.

Google data and Limited Use

Gmail Assist's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used for the mail and productivity features described here, not personalized advertising or sale to data brokers.

Storage and security

Workspace data is stored on the deployment server in account-scoped files and databases. Stored Google credentials are encrypted using the server's configured secret. Other workspace content is not necessarily encrypted at rest by the application. Session cookies and browser storage support sign-in and caching. Server administrators have operational access; account scoping does not prevent administrator access.

Retention and deletion

Server data remains until removed by the operator or available application controls. There is no universal automatic retention period. Backup retention depends on operator configuration. Browser caches remain until cleared.

You can revoke Google access in your Google Account. Revocation stops future authorized access but does not automatically delete stored information. To request deletion of your account, cached mail, documents, or other server data, contact the administrator who provided access to this deployment. Clear site storage on shared devices after signing out.

Contact and changes

For privacy questions or deletion requests, contact your deployment administrator through the channel used to provide your account. Updates will be published at this URL with a revised date.