Privacy Policy

my-inbox-agent · Last updated: July 2026

my-inbox-agent (“the app”) is a personal, single-user automation operated by Justin Osler for his own Google account. It is not offered to the public and is used only by the account owner. This policy explains what data the app accesses and how it is handled.

Who this applies to

The only user of the app is its owner, who authorizes it against his own Google account. The app does not onboard, serve, or collect data from any other person.

Google user data the app accesses

Under the owner's own OAuth authorization, the app requests these Google API scopes, each limited to the minimum needed for its function:

• gmail.modify — read the owner's messages, apply labels, mark read/unread, and move messages to Trash. This scope cannot permanently delete mail.
• gmail.settings.basic — read and manage the owner's own Gmail filters.
• calendar.events — read events and RSVP on the owner's primary calendar.
• calendar.readonly — read the owner's other calendars to detect scheduling conflicts.

The app does not request permission to send email, to permanently delete mail, or to write to any calendar other than the owner's own.

How the data is used

Data is used solely to (1) triage the owner's inbox — labeling, marking read, or moving mail to Trash — and (2) detect calendar conflicts and RSVP to invitations. Processing happens on hardware the owner controls. Message and event contents may be sent to the Anthropic API to classify a message into a single category; that content is used only for that classification and is not used to train models.

Data sharing and storage

• The app does not sell, rent, or share the owner's data with any third party for advertising or any other purpose.
• The only outbound information is (a) private notifications to the owner's own Discord and (b) an anonymous uptime “heartbeat” ping containing no message content.
• Operational records are kept locally on the owner's own machine and are not published.

Limited Use disclosure

The app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used only to provide the features described above, is not transferred to others except as necessary to provide those features, is not used for advertising, and is not used to train generalized AI/ML models.

Retention and deletion

The app does not create a separate copy of the owner's mailbox. Messages remain in the owner's own Google account; anything the app “deletes” is moved to Trash and recoverable under Google's normal retention window. The owner can revoke the app's access at any time at myaccount.google.com/permissions.

Contact

Questions about this policy: justin.osler@gmail.com