Privacy policy

Who this is for. This is a private tool run by Mayeux M.D., P.C. for one person: its owner. Only Google identities on the owner's allowlist can sign in. Everyone else is refused.

What it accesses. With the owner's consent, per linked Google account: Gmail (read, and create drafts), Google Calendar (read, and create events), and Google Drive (read). It never sends email.

How data is used. Data is fetched only when the owner asks their Claude assistant a question, and is returned only to that assistant. It is not sold, shared, used for advertising, or used to train AI models. Gmail, Calendar and Drive content is not stored by this server.

What is stored. For each linked account: the account's email address, its alias, and a Google refresh token, encrypted with AES-256-GCM. Short-lived access tokens are cached encrypted for under an hour.

Removing access. The owner can unlink any account from the linking page, which deletes its stored token and revokes the grant with Google. Access can also be revoked at any time at myaccount.google.com/permissions.

Google API Services User Data Policy. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact. doug@dougmayeuxmd.com