gmail-mcp is a personal tool used only by its owner, on the owner's own computer, with the owner's own Google accounts.
With the owner's consent it reads and searches email and creates drafts through the Gmail API (scopes gmail.readonly and gmail.compose). It does not send, delete, move or label email.
Only an OAuth refresh token for each signed-in account, in a private file on the owner's computer. Email content is not stored by the tool.
Data is not sold, shared with third parties or used for advertising. Email content is shown only to the owner's local AI assistant during a session.
Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Access can be removed at any time at myaccount.google.com/permissions.