Last updated: October 14, 2026
This policy explains how Matt's Agents (the "app"), operated by Matt Palmer, accesses, uses, stores, and shares data when you sign in with Google. The app is a personal tool. Its only intended user is Matt Palmer.
Data the app accesses
When you sign in with Google, the app requests only the permissions (scopes) you approve on Google's consent screen. Depending on those permissions, the app may access:
- Basic profile information: your name, email address, and profile picture, used to identify the signed-in account.
- Gmail: email messages, drafts, and labels, used to read, summarize, draft, send, and organize email when you ask an agent to.
- Google Calendar: calendars and events, used to view your schedule and create or update events when you ask an agent to.
- Google Drive, Docs, and Sheets: files and their contents, used to find, read, create, and edit documents when you ask an agent to.
The app never requests your Google password.
How the data is used
Google user data is used only to carry out tasks you explicitly request, and to provide and improve those user-facing features. It is not used for advertising, profiling, or any purpose unrelated to the app's functionality.
To complete a task, the relevant data may be sent to an AI model provider (for example, an LLM API) for processing at that moment. Data is sent only under terms that prohibit the provider from using it to train its models.
How the data is stored and protected
- OAuth access and refresh tokens are stored encrypted on infrastructure controlled by Matt Palmer and are never published or shared.
- Google data is processed in memory for the task at hand. The app does not keep a copy of your mailbox, calendar, or files.
- Short-lived logs may record which actions an agent took, for debugging. These are kept for no more than 30 days.
- All data is transferred over encrypted (HTTPS/TLS) connections.
Sharing
Google user data is not sold, rented, or shared with third parties, except:
- with AI model providers, only as needed to complete a task you requested, as described above;
- when required by law; or
- with your explicit consent.
No humans read your Google data unless you give explicit permission, it's needed for security reasons or to comply with the law, or it's been aggregated and anonymized.
Google API Services User Data Policy
The app's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google Workspace data is not used to develop, improve, or train generalized AI or machine-learning models.
Retention and deletion
Tokens are kept until access is revoked. You can revoke the app's access at any time from your Google Account permissions page. When access is revoked, the app's stored tokens stop working and are deleted. You can also ask for any stored data to be deleted by emailing the address below, and it will be removed within 30 days.
Children
The app isn't intended for anyone under 13, and doesn't knowingly collect data from children.
Changes
If this policy changes, the updated version will be posted on this page with a new "last updated" date.
Use of the app is also governed by the terms of service.
Contact
Questions about this policy or your data: [email protected].