Gmail MCP

Privacy policy

Effective date: 16 November 2026

This policy explains how Gmail MCP handles Google user data. Gmail MCP is a private, owner-operated local integration and is not offered as a public service.

Google data accessed

After the account owner gives consent, Gmail MCP may access Gmail messages, message metadata, drafts, labels, and mailbox state through the Gmail API. Its configured OAuth scopes allow Gmail modification, composition, and label management.

How data is used

Google user data is used only to perform actions that the account owner requests, such as searching or reading mail, creating drafts, sending or replying to messages, and changing labels or read state. It is not used for advertising, profiling, credit decisions, or training general-purpose AI models.

Storage and retention

OAuth credentials are stored locally on the owner's computer with operating-system access controls. Gmail MCP does not operate a remote database of mailbox content. Message content may be processed transiently by an approved local automation client to complete an owner-requested task. Local outputs created at the owner's request remain under the owner's control.

Sharing and disclosure

Gmail MCP does not sell Google user data. It does not disclose Google user data to third parties except when the owner explicitly directs a communication to a recipient, when required by law, or when necessary for the Google Gmail API to provide the requested service.

Security

The connector uses Google's OAuth 2.0 flow, keeps separate credentials for each configured account, validates the expected Gmail identity, and restricts local token files using operating-system permissions. No system can be guaranteed completely secure, but access is limited to the minimum people and local processes needed to operate the connector.

User control and deletion

The account owner can revoke access at any time from the Google Account permissions page. The owner can also delete the local OAuth token files, which prevents further access until consent is granted again. Requests about local data or credentials can be sent to the contact below.

Google API Limited Use

Gmail MCP's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

Email buddhaisnot@gmail.com with privacy questions or requests.