Website visits
The current public website serves static information pages. It has no sign-in form, advertising, embedded third-party analytics, or client-side tracking scripts. Visiting these pages does not grant access to your Google account.
The web server records ordinary access and error logs. These can include IP addresses, request times, requested paths, browser information, and referring pages. They are used to operate, secure, and troubleshoot the website, with retention governed by the server’s log configuration.
Google account data
MCP is a personal-use assistant, not a public signup service. It uses Google OAuth to connect an account only after that account’s owner explicitly authorizes the requested permissions.
Depending on the permission granted and the task requested, the assistant can access:
- Account identity: the basic profile and email address needed to identify the connected account.
- Gmail: messages, sender and recipient information, attachments, and labels, to help read and organize mail or draft and send messages.
- Calendar: calendar lists and event details, to help view, create, or manage events.
- Drive, Docs, and Sheets: file metadata and selected file, document, or spreadsheet content, to carry out requested file and editing tasks.
Permissions can allow more access than a single task needs. Authorization itself does not automatically send messages, publish documents, or perform an edit; those actions are undertaken as part of an owner-requested workflow.
Google Maps is configured separately using Maps APIs. Address, place-search, coordinate, and route requests are sent to Google to provide those results. Maps API access does not itself grant access to Gmail, Drive, or private Maps account history.
Processing and sharing
Google account data is used to provide the requested personal-assistant features. This application does not sell that data, use it for advertising, or use it to train general-purpose AI or machine-learning models.
Selected content may be processed by tools or AI services configured by the owner to perform a requested task, such as summarizing a document or drafting a reply. This can involve processing on a third-party provider’s servers; it is not a guarantee that all data stays on the local device. Those providers’ privacy policies and account settings also apply, and they must be configured consistently with the permitted use of Google data.
Data may also be sent to an intended recipient or shared with another person when the owner requests that action, or disclosed when legally required. The static website does not publish the contents of the connected account.
Use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Storage and retention
The currently configured Google Workspace CLI stores OAuth credentials encrypted on the owner’s device, using a key held in the operating system’s credential store. Credentials are not included in the public website or its static assets.
Task results may appear in local working files, saved conversations, or records kept by the configured tools and service providers. Retention depends on the workflow and those services’ settings; local copies can remain until the owner deletes them. Original emails and files in Google remain subject to the owner’s Google account settings.
Information is kept only as needed for the requested functionality, account connection, security, or applicable legal obligations. Requests to remove copies managed by the operator can be sent to the contact address below.
Your controls
You can revoke MCP’s Google account access through your Google Account connections and remove the corresponding credentials from the owner-controlled tools.
Revocation prevents future authorized access after existing access expires, but does not automatically delete data already copied into files, conversations, or third-party services. Those copies must be removed separately through the relevant tool or provider.
If another account owner is invited to use the assistant, they can contact the operator to ask about access, correction, or deletion of data held on their behalf. Other applications or services on ATROi subdomains are not automatically covered by this policy.
Contact and updates
This website and personal assistant are operated by the ATROi site owner. For privacy questions or deletion requests, email roeseth@gmail.com.
This policy will be updated when the website or the assistant’s data practices change. The date above identifies the current version.
Back to ATROi