Privacy policy

Last updated: 2026-11-07

This policy describes Homelab Mail, a personal-use Gmail assistant operated by Nassim. Questions and deletion requests can be sent to nostalgia.driver@gmail.com.

Google account data and permissions

After explicit authorization, the integration can access account identity, Gmail message and thread contents, headers, labels, and drafts, as needed for the requested task. It requests Gmail read and modify permissions and basic account identity. It does not request Calendar or Gmail mailbox-settings permissions.

The Gmail modify permission permits actions beyond the exposed tools, including sending. Homelab Mail separately disables sending and permanent deletion in its integration policy; the authorization token is not read-only.

Use and processing

Google data is used to provide the mailbox operations requested by the operator: search and reading, draft preparation, labels, read status, archive, Trash, and restore. Email contents and derived information may be included in assistant conversations, tool results, or memory when those features are used.

When an AI feature uses email data, the selected content is transmitted to the configured external AI provider, such as OpenAI or Anthropic, for inference. Provider retention and handling depend on the applicable service terms and account settings. Self-hosting the integration does not mean all processing stays on the private server. The operator must review provider terms and settings before enabling email-to-model processing.

Homelab Mail does not sell Google user data, use it for advertising, or use it to train generalized AI models. Any use or transfer of Google user data must comply with the Google API Services User Data Policy, including its Limited Use requirements.

Storage, access, and retention

Google refresh tokens are kept on the private server using an encrypted file keyring, with its password stored separately from the keyring. The server operator administers that infrastructure. Tokens are not published on this website. Chat history, tool output, memory, and backups may retain message content or derived data; there is no automatic deletion period promised by this policy.

Revocation and deletion

You can revoke Homelab Mail in your Google account’s third-party connections. Revocation blocks further use of that grant, but does not automatically remove existing conversations, memory, backups, or copies already processed by an external provider. Contact the operator to remove locally retained tokens and application data and address backup retention. External provider copies are governed by that provider’s deletion procedures.

This public website

These static informational pages are hosted by Cloudflare Pages. They have no application login, mailbox connection form, analytics scripts, or tracking cookies added by Homelab Mail. Cloudflare processes network request information to deliver and protect the site under its own policies. Do not send credentials, authorization codes, or email contents through this website.

Changes

This page will be updated when the integration’s data handling changes. Additional Google services or capabilities require separate configuration and authorization.