Privacy Policy
Last updated: July 2026
What this application does
Gmail Action Tracker connects to your Gmail account (with your explicit consent via Google OAuth) to identify action-required emails, organize them into cases, and remind you of deadlines. It is self-hosted: your data is stored in a local database on the server operated by you or your organization — it is not sent to any third party.
Google user data we access
With the gmail.readonly scope we read message headers, bodies and attachment metadata from your Inbox and Sent mail to classify and index them. With the gmail.send scope we send emails only when you explicitly trigger them (reminders you schedule, replies you write, and the optional daily digest you enable). We never send email automatically without a user-configured action.
Storage and protection
Email data is stored in a local SQLite database on the hosting server. OAuth tokens are encrypted at rest (AES-256-GCM). Attachment files are only downloaded on demand. Optional retention settings can purge stored email bodies after a configurable period. Nightly database backups are kept locally with rotation.
Sharing
Your data is never sold, shared, or transferred to third parties. If an AI provider (Anthropic or OpenAI) is configured by the administrator, thread text is sent to that provider only when you click "Generate summary" or "AI draft", solely to produce that output. Use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
Your controls
You can disconnect the app at any time from your Google Account permissions page, which revokes its access. You may also ask the administrator to delete your stored data; deleting your user account removes all associated emails, cases, reminders and audit records (cascade delete).
Contact
For privacy questions, contact the administrator of this deployment.