Privacy Policy

Who operates the application

Local Mail Assistant is a personal email workflow operated by Lokesh Rankawat. It runs locally on the operator's Windows computer and uses a local Model Context Protocol (MCP) server to access Gmail.

Contact: support@mpowermart.com

Gmail information and permissions

The application requests Google's Gmail modify and send permissions: https://www.googleapis.com/auth/gmail.modify and https://www.googleapis.com/auth/gmail.send. These allow it to read and modify mailbox data and send messages. Depending on a requested task, the application may access message addresses, subject lines, bodies, threads, labels, and attachments. Each mailbox is authorized separately, and the returned Gmail account is checked before its credentials are saved or used.

These permissions are broader than read-only access. The application can move messages to Trash, but does not offer permanent deletion of Gmail messages. A user-created draft can be deleted after confirmation.

How information is used and shared

Gmail information is used to complete tasks requested by the account owner, such as finding or summarizing messages, preparing drafts, or carrying out an approved mailbox action. The local application sends Gmail API requests to Google.

When the owner asks an AI assistant in Visual Studio Code to analyze, summarize, or transform email content, the relevant tool output may be included in the conversation and sent to the AI service selected in Visual Studio Code. That service may process and retain prompts, outputs, or conversation history under its own terms and settings. The selected service can vary; the owner should check its current privacy and retention terms before using email content with it.

GitHub Copilot may be used with the account's “Allow GitHub to use my data for AI model training” setting disabled. This does not prevent GitHub from processing prompts to provide Copilot or determine its service retention. See the GitHub General Privacy Statement and recheck the account setting before use because provider settings and terms can change.

The operator does not intend to sell Gmail information or use it for advertising. Google processes data when providing Gmail API services, and the selected AI service may process content needed to answer the owner's request.

Storage and retention

OAuth tokens are encrypted with Windows Data Protection API (DPAPI) for the current Windows user and stored on that user's computer. The OAuth client configuration is also stored locally with access restricted to the Windows user and SYSTEM. The application does not intentionally create a separate local archive of email bodies or attachment bytes.

Gmail data may remain in the connected Gmail account according to the owner's actions. Tool output may remain in Visual Studio Code conversation history or related records, and may be handled under the selected AI service's retention rules. The operator does not control that service's retention settings.

Controls and revoking access

The account owner chooses which Google accounts to authorize. Sending, archiving, trashing, deleting a draft, changing labels, and changing read or star status require a local confirmation prompt; the safe default is No. Creating or editing a draft does not send it. A message moved to Trash may later be permanently deleted by the account owner directly in Gmail.

The owner can revoke the application's Google access in their Google Account's third-party connections settings. Local token files can be removed from %LOCALAPPDATA%\VSCodeGmail\tokens on the Windows computer. Stop the local MCP server before removing files.

Security and changes

The application is intended for the account owner's personal use on a locally controlled computer. The operator is responsible for protecting the computer, its Windows account, and access to Visual Studio Code. No system can guarantee absolute security.

This notice must be updated if Gmail access, storage, sharing, the selected AI services, or application behavior changes. For questions or privacy requests, contact support@mpowermart.com.