Privacy policy

Gmail MCP is a private connector, run by the owner of georufino.com for personal use, that lets the Claude assistant work with the owner's own Gmail accounts. Only the owner's Google accounts can sign in or be linked.

What it accesses

• Your Google account's email address (scopes openid and email), to check that you're allowed to sign in and that the right inbox is being linked.
• Gmail messages, threads, labels and drafts (scope gmail.modify), to search and read mail, find messages awaiting a reply, add or remove labels, and create drafts.

How it's used

Gmail data is read only when you ask Claude to do something with your email, and the results are returned to Claude (provided by Anthropic) to answer that request. The connector never sends email, and never trashes, deletes, archives or marks mail as spam. Attachment contents are never read; only their names, types and sizes.

Data is not sold, not used for advertising, and not shared with anyone else. This service doesn't use it to train AI models.

What's stored

• For each linked inbox: a Google refresh token, its email address, granted scopes and link date, encrypted with AES-256-GCM in Cloudflare Workers KV.
• Short-lived Google access tokens (up to about an hour) and the inbox's label names (up to 10 minutes), encrypted the same way.
• Email content isn't stored. Service logs record only the time, tool name, inbox alias, HTTP status, duration and error code, never email content, addresses, search queries or tokens.

The service runs on Cloudflare Workers.

Your control

You can revoke access at any time at myaccount.google.com/permissions. After that, the stored refresh token no longer works, and it's replaced if you link the inbox again.

Google API Services User Data Policy

Gmail MCP's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.