Privacy Policy
Last updated: September 30, 2026
This policy explains what data Private MCP ("the app") collects, how it is used, stored, and shared, and how you can have it deleted, including data received from Google APIs.
Who operates the app
Private MCP is a privately operated Model Context Protocol (MCP) server hosted at this domain. It connects an AI assistant that you choose (such as Claude) to your Google Workspace account. Contact: jynetically@gmail.com.
1. Data the app accesses
The app only accesses Google data after you sign in with Google and approve the requested permissions, and only reads or changes that data when your AI assistant makes a request on your behalf. Depending on what you ask for, that includes:
| Source | Data | Why |
|---|---|---|
| Google account | Name, email address, profile picture URL, Google account ID | Identify which account is signed in and keep its tokens separate from other accounts. |
| Gmail | Message headers, bodies, attachments, labels, drafts, filters, vacation/auto-reply settings | Search and read the messages you ask about, draft and send email you request, and manage labels and filters you ask to change. |
| Google Drive | File names, metadata, contents, folders, sharing permissions | Find, read, create, update, or share the files you name. |
| Docs, Sheets | Document and spreadsheet contents and comments | Read and edit the documents and spreadsheets you request. |
| Calendar | Calendars, events, attendees, free/busy information | Show your schedule and create or update the events you request. |
| Tasks | Task lists and tasks | Read and manage the tasks you request. |
| Apps Script | Script projects, code, deployments, run metrics | Read, edit, deploy, or run the scripts you request. |
The exact permissions (OAuth scopes) the app requests are:
https://www.googleapis.com/auth/calendarhttps://www.googleapis.com/auth/calendar.eventshttps://www.googleapis.com/auth/calendar.readonlyhttps://www.googleapis.com/auth/documentshttps://www.googleapis.com/auth/documents.readonlyhttps://www.googleapis.com/auth/drivehttps://www.googleapis.com/auth/drive.filehttps://www.googleapis.com/auth/drive.readonlyhttps://www.googleapis.com/auth/gmail.composehttps://www.googleapis.com/auth/gmail.labelshttps://www.googleapis.com/auth/gmail.modifyhttps://www.googleapis.com/auth/gmail.readonlyhttps://www.googleapis.com/auth/gmail.sendhttps://www.googleapis.com/auth/gmail.settings.basichttps://www.googleapis.com/auth/script.deploymentshttps://www.googleapis.com/auth/script.deployments.readonlyhttps://www.googleapis.com/auth/script.external_requesthttps://www.googleapis.com/auth/script.metricshttps://www.googleapis.com/auth/script.processeshttps://www.googleapis.com/auth/script.projectshttps://www.googleapis.com/auth/script.projects.readonlyhttps://www.googleapis.com/auth/script.scriptapphttps://www.googleapis.com/auth/spreadsheetshttps://www.googleapis.com/auth/spreadsheets.readonlyhttps://www.googleapis.com/auth/taskshttps://www.googleapis.com/auth/tasks.readonlyhttps://www.googleapis.com/auth/userinfo.emailhttps://www.googleapis.com/auth/userinfo.profileopenid
The app does not collect data from any source other than Google APIs and the requests your AI assistant sends. It does not use cookies for tracking or analytics; the only cookies it sets are short-lived security cookies used during sign-in.
2. How the app uses Google user data
Google user data is used only to provide the features you request through your connected AI assistant: for example, returning the email you asked to see, creating the draft you asked for, or updating the spreadsheet you named. The result of each request is returned only to the AI assistant you connected, which is the client you chose to use.
3. What the app stores
- OAuth tokens. Access and refresh tokens issued by Google are stored encrypted on the server so you don't have to sign in on every request.
- Temporary files. Attachments you ask to download are kept temporarily and deleted automatically after about one hour.
- Operational logs. Request logs (such as timestamps, endpoints, and error messages) are kept for troubleshooting and security. They are not used to build profiles of users.
The app does not keep a copy of your email, files, or calendar content beyond what is needed to complete a request.
4. Sharing and transfer
Google user data is not sold, rented, or shared with third parties, except that results are returned to the AI assistant you connected at your direction. Data is not used for advertising, is not used to determine credit-worthiness or for lending purposes, and is not used to develop, improve, or train generalized AI or machine learning models. No human reads your data unless you give explicit permission for a specific support request, it is necessary for security purposes, or it is required by law.
5. Google API Services User Data Policy
The app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. Security
All traffic to the app uses HTTPS. Stored tokens are encrypted, and access to the server is restricted to the operator.
7. Retention and deletion
Tokens are kept until you revoke access or ask for deletion. You can revoke the app's access at any time at myaccount.google.com/connections, after which the stored tokens stop working. To have all stored tokens and any related records deleted, contact jynetically@gmail.com; requests are handled within 30 days.
8. Children
The app is not directed to children under 13 and does not knowingly collect their information.
9. Changes
If this policy changes, the updated version will be posted on this page with a new "Last updated" date.
10. Contact
Questions about this policy: jynetically@gmail.com.