Alfred — Gmail Privacy Policy

This notice covers Alfred's private Gmail assistant and the Google OAuth application identity currently called Mailbox Commander. The application is used by the owner of the connected personal Google account, not offered as a public service.

1. What information the app accesses

With the account owner's consent, Alfred uses the Gmail API to obtain limited personal Gmail metadata: sender, subject, message identifier, Inbox/unread labels and relevant dates. For new personal messages that pass additional local screening, it may retrieve message text temporarily to recognize action requests, replies and pending follow-ups. The current automated case-evidence process does not retain full email bodies.

The main monitoring connection uses gmail.readonly. A separate owner-authorized connection using gmail.modify may support explicitly reviewed Gmail actions such as draft preparation, labeling, archiving and sending an individual message. The authorization screens specify the exact Google permissions requested.

2. How information is used

Google user data is used only to provide the personal Gmail and case-follow-up features requested by the owner: monitoring relevant personal messages, presenting review candidates, preparing responses, tracking decisions, and checking whether actions were completed. Gmail data is not used for advertising, resale, lead generation or training a general-purpose AI model.

Known employer-origin correspondence is excluded from the personal workflow. The app also screens selected content for employment-sensitive information and authentication codes before creating persistent review evidence. These controls reduce risk but cannot guarantee that every sensitive message is identified.

3. Where information is stored

OAuth tokens are held in Windows Credential Manager on the owner's authorized computer. Source fingerprints, limited Gmail metadata, classifications, content hashes, approvals and action histories may be kept in local files or a local database on that computer. No full email bodies are intentionally transferred to the owner's personal cloud server. The current workflow does not transmit Gmail message bodies or OAuth tokens to social platforms, advertisers or data brokers.

4. Sharing and Google API Limited Use

Google user data is not sold or shared for advertising. Any service-provider access would need to be necessary for the user-facing functionality, subject to appropriate safeguards and reflected in an updated notice. The current automated Gmail content classification operates locally. Human access is limited to the account owner, except where required by law or necessary to investigate a security issue with the owner's authorization.

The application uses information received from Google APIs in accordance with the Google API Services User Data Policy, including its Limited Use requirements.

5. Retention and deletion

Gmail metadata and personal case records may remain on the owner's device to maintain history and prevent duplicate alerts until the owner removes them. The application does not automatically delete messages from Gmail. The owner can stop local monitoring and delete local application data. Deleting local data and revoking Google OAuth permissions are separate actions.

6. Your choices

Authorization is voluntary. The account owner can review or revoke third-party access in Google Account connections. Revocation prevents new authorized Gmail API requests once credentials are invalid. Any Gmail message or draft already stored by Google remains subject to Google's own controls and retention policies.

7. Security and changes

Alfred uses a locally stored credential vault, account verification and limited authorization scopes. Certain external account actions are subject to exact per-action review and recorded outcomes. This policy will be revised before any material change to data use, third-party recipients, scopes, cloud processing, or access by additional people.

8. Contact

For questions about this personal application or deletion of its locally stored records, contact kevin.pausicles@gmail.com.