Privacy Policy

Claudia Gmail Triage — last updated 10 September 2026

1. Overview

Claudia Gmail Triage ("the Application") is a private, single-user automation tool operated by the owner of the Google Account it is connected to ("the Operator"). The Application is not offered to the public and has no users other than the Operator.

2. What Google user data the Application accesses

With the Operator's explicit consent, the Application accesses the following data from the Operator's own Gmail mailbox:

• Message metadata: sender, recipient, subject, and date.
• Message content: the plain-text body of incoming messages.
• Mailbox state: which messages are unread, and their existing labels.

Access is limited to the Operator's own mailbox. The Application does not access any other Google user's data.

3. How the data is used

The data is used for one purpose only: to organise the Operator's own inbox.

• Classifying incoming messages into categories (relevant, advertising, newsletter, phishing).
• Applying Gmail labels and marking messages as read according to that classification.
• Producing short summaries of messages the Operator may want to act on.

4. How the data is stored and shared

• No third-party sharing. Google user data is never sold, rented, transferred, or disclosed to any third party.
• No advertising use. Data is never used for advertising, profiling, or any purpose unrelated to inbox organisation.
• Local processing. Messages are processed on the Operator's own privately-hosted server. Message bodies are held in memory only for the duration of processing and are not written to any external service.
• Minimal retention. Only a short record of the triage decision (message ID, sender, subject, and the resulting category) is kept locally, on the Operator's own server, so that the same message is not processed twice.
• No human access by third parties. No person other than the Operator can read the data. Automated processing may use a third-party language model API; in that case only the minimum text required for classification is transmitted, and the provider is contractually bound not to use it for training or any other purpose.

5. Google API Services User Data Policy

The Application's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data retention and deletion

The Application retains no Google user data beyond the minimal triage record described in section 4. All locally held records can be deleted at any time by the Operator.

7. Revoking access

The Operator may revoke the Application's access to the Google Account at any time at myaccount.google.com/permissions. Revoking access immediately stops all further data access.

8. Contact

Questions about this policy: hkalexagent@gmail.com