mail-digest Privacy Policy
Effective
This policy covers mail-digest, a personal tool operated by Andrew Luxem. For this website itself, see the andrewluxem.com privacy policy.
What mail-digest is
mail-digest is a private, single-user application. It is not offered to the public and has one authorized user: its operator. It reads one Gmail mailbox that the operator owns and produces a daily summary of that mailbox for the operator.
What it accesses
With the operator's consent through Google's OAuth screen, mail-digest requests one permission: read-only access to Gmail (https://www.googleapis.com/auth/gmail.readonly). It cannot send, delete, label, or modify email. It does not access contacts, calendar, Drive, or any other Google data.
How the data is used
Messages are read once a day to build a digest that is delivered privately to the operator. Mail the operator forwards to the mailbox is summarized by Anthropic's Claude API. Google Alerts are processed locally and are never sent to a third party. Nothing is used for advertising. Nothing is sold, rented, or shared with anyone else. No data is used to train AI models.
Where it is stored
Message copies, the daily digests, and a log of processed message IDs are stored on a private server controlled by the operator. That server is reachable only from the operator's own private network, and its backups are encrypted. OAuth credentials are kept in a file readable only by the system administrator.
Retention and removal
Stored data is kept for as long as the operator needs it for personal records and is deleted when no longer needed. Access can be revoked at any time at https://myaccount.google.com/permissions. Once access is revoked, mail-digest can no longer read the mailbox.
Google API Services User Data Policy
mail-digest's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Contact
Questions about this policy: andrew@andrewluxem.com