Privacy

This is a placeholder written with phase 2 (2026-09-30). The real policy is written before anyone outside the developer connects a mailbox.

Bernard Bot reads your Gmail with read-only access to turn what needs doing into tasks. It never sends, modifies or deletes mail.

Message text is kept for at most 30 days after the last message in a thread, then deleted. Headers and the tasks made from them are kept while your account exists.

Your Google refresh token is stored encrypted. Deleting your account removes every row that belongs to you and revokes Bernard's access at Google.

Bernard Bot's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.