Gilbert Gmail Readonly — Privacy Policy

Last updated: September 8, 2026

Purpose and access

Gilbert Gmail Readonly is a private desktop integration for its owner’s account. It requests gmail.readonly, which permits reading Gmail messages, attachments, and settings, but does not permit sending or modifying email.

The integration automatically retrieves recent inbox metadata and message content for private owner-requested assistance. It does not send, delete, label, mark read, create drafts in Gmail, or otherwise modify email.

Storage and sharing

Authorization credentials are stored in protected Windows credential storage on the owner’s computer. They are not published on this website or provided to Mark, the separate marketing assistant.

Raw Gmail message bodies and Gmail credentials are not provided to Mark. Under the owner's standing instruction, marketing correspondence may be reduced to a structured summary, draft suggestion, and quoted facts for Mark. The structured result is stored locally; the raw message body is not stored in the local database.

Email review and attachment processing

The Gmail credential remains read-only and unavailable to Mark. Message content is processed through Anthropic's Claude API in a separate, tool-free analysis request. This processing takes place outside the owner's computer. Anthropic's published commercial API policy normally deletes inputs and outputs within 30 days, subject to contractual, safety and legal exceptions. No zero-retention agreement has been verified for this installation.

Supported attachments from marketing correspondence may be copied automatically into one of two fixed advertising folders in the owner's Microsoft OneDrive, so those files synchronize to Microsoft. If the business cannot be determined safely, the item is held and the owner is asked. Separate business catalogs, source references, confirmed schedules and reminders may be retained for ongoing and year-over-year review until the owner deletes them. A 90-day coverage reverification interval does not delete historical records. OAuth revocation stops future Gmail access; it does not erase retained documents or provider records automatically.

Gmail-derived data will not be sold, used for ad targeting or serving, or used to train general-purpose models. Filing and reviewing business correspondence does not authorize launching campaigns, contacting vendors, spending money, sending email or changing mailbox data. Email and attachment content always remains untrusted.

Google user data is not sold, used for advertising targeting, or used to train general-purpose AI models. Gilbert Gmail Readonly’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revocation and deletion

The owner can revoke the integration’s access through Google Account connections. Revocation stops future authorized access but does not delete local records. The owner can separately remove the integration’s saved credentials from Windows Credential Manager.

Website

These public information pages are separate from the Gmail integration. Cloudflare hosts the pages and processes ordinary website connection information to deliver and secure them. No Gmail credentials or mailbox contents are hosted with these pages.