Privacy Policy
Claude Gmail is a private, internal productivity tool operated by Product Catalyst (“the operator”). It lets the operator search and read its own Gmail and Google Workspace mailboxes from an AI assistant (Claude, by Anthropic) running on the operator’s own computer. It is not offered to the public, and only accounts owned or administered by the operator are connected to it.
Google user data we access
With your permission, Claude Gmail requests one Google permission: https://www.googleapis.com/auth/gmail.readonly (“View your email messages and settings”). This lets it read email messages, threads, headers, labels and attachment names. It cannot send, delete, move, label or otherwise change any email or setting.
It also reads the email address of the connected account, so it can tell connected accounts apart.
How the data is used
- Emails are only retrieved when the operator asks a question that needs them (for example “find the invoice from last week”), or when a scheduled check that the operator configured looks for new important email.
- The retrieved email content is used solely to answer that request or produce that notification for the operator.
- Google user data is never used for advertising, never sold, never used to build profiles, and never used to train or improve AI or machine-learning models.
Where data is stored
- Claude Gmail has no server and no database. It runs only on the operator’s own computer.
- The Google sign-in tokens are stored locally on that computer, in files readable only by the operator’s user account, on an encrypted disk.
- Email content is not saved to disk by Claude Gmail. It is held in memory only while answering a request.
Sharing and transfer
When the operator asks Claude about an email, the relevant email content is sent to Anthropic’s Claude service, which processes it to produce the answer, under the operator’s Anthropic account terms. Google user data is not shared with or transferred to anyone else, except where required by law.
Claude Gmail’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Retention and deletion
Sign-in tokens are kept until the account is disconnected. To revoke access at any time, remove “Claude Gmail” at myaccount.google.com/permissions. Disconnecting an account also deletes its locally stored token.
Changes
If this policy changes, the updated version will be posted on this page with a new “last updated” date.
Contact
Questions about this policy: john@productcatalyst.co.uk