Privacy disclosure
Your email,
your connection.
This disclosure describes the personal PDX Agent Email integration. Effective October 28, 2026.
Data accessed and its purpose
With the account owner's consent, PDX Agent Email can read Gmail messages, their metadata and attachments, and send email. It uses authorized requests to provide the owner's assistant service and send replies. Google's read-only scope covers the mailbox and cannot be restricted to one alias or sender.
The incoming-request handler is designed to process only new requests addressed to the agent alias from the owner's explicit sender allowlist. The owner can also ask PDX Agent to perform specific authorized email tasks.
How data is processed
Authorized email text and pictures may be supplied to the owner's configured PDX Agent model and tools to fulfill a request. The current model operates locally. Replies sent through Gmail are delivered to their intended recipients. Other tool destinations require the owner's separate authorization.
Gmail data is not sold, used for advertising or used to train general-purpose AI models. The integration's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Storage and protection
OAuth credentials and local request records stay in the owner's restricted Windows environment, outside source control. Native runtime credentials are protected by Windows file permissions; a separate recovery copy is encrypted with Windows CurrentUser DPAPI. The live native credential file is not itself DPAPI encrypted. Local records remain until the owner disposes of them under their retention and recovery practices.
This public website stores no mailbox content or OAuth credentials and includes no application analytics, sign-in or upload feature. Its hosting provider may process ordinary web request information to deliver and secure these pages.
Control and revocation
The granted scopes do not permit modifying existing messages, read flags, labels, filters, forwarding or account security settings. Sending creates a new message through Gmail.
The owner can revoke future Google API access through Google Account connections and stop local processing. Revocation does not erase previously retained local records. Contact the account owner through the support address shown on Google's consent screen for access or retention questions.