GoogleAccessMCP privacy policy

Effective 8 October 2026.

GoogleAccessMCP is a private tool used only by its owner, on the owner's own Gmail accounts. This page describes what it does with data from those accounts.

What it accesses

Messages, labels and drafts in the Gmail accounts the owner has authorized, through the Gmail API. Depending on the permission the owner chose for each account, it can read mail, change labels, move mail to the trash, write drafts and send drafts. It never requests permission to permanently delete mail.

Where the owner has also allowed it, calendars and events in those accounts, through the Google Calendar API, read only. It cannot create, change or respond to an event.

Where the owner has also allowed it, files in those accounts' Google Drive, through the Google Drive API. For most accounts this is read only. Where the owner has allowed editing for an account, it can also create files and folders, edit Google Docs and Sheets through the Google Docs and Sheets APIs, rename and move files, and move them to the trash. It cannot share a file, change who can see it, or delete it permanently.

Where the data goes

The tool runs on the owner's computer and talks directly to Google. It has no server of its own, no database, no analytics and no advertising.

When the owner asks their AI assistant (Claude, made by Anthropic) to work with mail, the messages, events or files involved are passed to that assistant so it can carry out the request, under the owner's own Anthropic account and its terms.

Data from Gmail, Google Calendar and Google Drive is not sold, not shared with anyone else, and not used for any purpose other than carrying out what the owner asks.

What it stores

An access credential for each authorized account, kept in the operating system's keychain on the owner's computer, and a short list of the authorized addresses with the permission chosen for each. It keeps no copy of any message, event or file.

Removing access

Access can be withdrawn at any time at myaccount.google.com/permissions, or with the tool's own remove command, which revokes the grant at Google and deletes the stored credential.

Contact

The owner can be reached at the support address shown on the app's Google consent screen.