Email Automation MCP
Contact

Privacy Policy

Email Automation MCP · Last updated: November 6, 2026

1. Introduction

Email Automation MCP (the "Application") is a Model Context Protocol (MCP) server that connects Gmail with MCP-compatible AI assistants and provides tools for authorized email automation workflows. It is an independent application developed by Lavish Gupta ("I", "me", "the developer"). It is not affiliated with, sponsored by, or endorsed by Google.

This Privacy Policy explains what information the Application accesses, why, how it is used, and the choices you have. It applies to the Application and to the website at mcp.lavishgupta.com.

2. Information the Application Accesses

The Application accesses information only to provide its email automation functionality:

  • Google account authorization data issued by Google when you grant access through Google's OAuth flow, which the Application needs in order to act on your Gmail account.
  • Gmail data made available by the permissions you grant, to the extent a requested action requires it (for example, sending a message from your account).
  • Request content that you or your AI assistant provide to the Application's tools, such as recipients, subject lines and message bodies for emails you ask it to send.

This website. The pages at mcp.lavishgupta.com are static. They do not use analytics, advertising trackers, or cookies, and they do not have forms that collect personal information. The only browser storage used is an optional light/dark theme preference kept for the current browser session.

3. Google Account and Gmail Data

The Application requests access to Google services only when required to provide its email automation functionality. The specific Gmail permissions (OAuth scopes) the Application requests are displayed to you on Google's consent screen before you approve them, and the Application accesses Gmail data only within the permissions you authorize.

Gmail data is accessed solely to carry out actions that you, or an AI assistant acting on your instruction, request through the Application's tools. The Application does not access your Gmail account for any other purpose.

4. How Google User Data Is Used

Google user data is used only to provide and improve the user-facing email automation features you request. In particular:

  • Data is used to perform the action you asked for, such as sending an email from your authorized Gmail account.
  • Google user data is not used for advertising, including retargeting, personalized or interest-based advertising.
  • Google user data is not sold.
  • Google user data is not used to develop, improve, or train generalized artificial intelligence or machine learning models.
  • The developer does not read your Gmail data, except where you give explicit consent for specific messages, where it is necessary for security purposes such as investigating abuse, or where it is required to comply with applicable law.

5. OAuth Authorization

Access to your Gmail account is granted through Google's OAuth 2.0 authorization flow. You sign in on a Google-operated page, review the permissions requested, and choose whether to approve them. The Application does not receive or store your Google password.

The Application's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This statement describes the Application's commitment; it is not a claim of certification, review, or approval by Google.

6. Data Storage

The Application keeps only the information it needs to operate. To act on your Gmail account on your behalf, it must hold the authorization credentials that Google issues to it (such as OAuth access and refresh tokens) for as long as your authorization is active. These credentials are used only to make the Google API requests you ask for.

The Application is not designed to build a separate archive or database of your email content. Message content passes through the Application only to carry out the action requested. Operational logs, where they are kept, are used for troubleshooting and abuse prevention.

Because the Application is an MCP server, the content of your requests and of the results returned also passes through the AI assistant you choose to use. See Third-Party Services.

7. Data Retention

Authorization credentials are retained only while they are needed to provide the service to you. When you revoke the Application's access in your Google Account, Google invalidates the permission and the Application can no longer access your Gmail data. Stored credentials that are no longer valid or needed are deleted on request (see Data Deletion) or when the Application no longer needs them.

Any operational logs are kept no longer than needed for troubleshooting, security, and legal compliance.

8. Data Sharing

Google user data is not sold, rented, or shared for advertising. It is transferred to others only:

  • to Google, as part of making the API requests you authorize (for example, sending an email through Gmail);
  • to the MCP-compatible AI assistant and the other tools you connect, as the results of the requests that you or the assistant make;
  • with your consent;
  • where necessary for security purposes, such as investigating abuse; or
  • where required to comply with applicable law, regulation, or a valid legal request.

9. Third-Party Services

The Application relies on the following third parties, each acting in the role described:

  • Google provides sign-in, the OAuth authorization flow, and the Gmail API. Google's handling of your data is governed by the Google Privacy Policy.
  • Your MCP-compatible AI assistant is chosen and controlled by you. It sends requests to the Application and receives results. The assistant provider handles that content under its own terms and privacy policy, which are outside the control of this Application. Review them before connecting an assistant.
  • Hosting infrastructure. This website and the server that runs the Application are served from hosting infrastructure, which may process technical connection data such as IP addresses as a normal part of serving requests.

10. Security

Reasonable measures are taken to protect information handled by the Application, including requesting only the permissions it needs, using Google's OAuth flow so that your password is never shared with it, and communicating over encrypted HTTPS connections. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed.

Only authorize the Application from devices and AI assistants you trust, because anyone able to use a connected assistant may be able to invoke the Application's tools on your account.

11. User Control and Revoking Access

You control the Application's access to your Google account. You can revoke it at any time:

  • Open your Google Account's third-party access settings, select Email Automation MCP, and choose to remove access.
  • Disconnect or remove the Application from your AI assistant.

Once access is revoked, the Application can no longer access your Gmail data.

12. Data Deletion

To request deletion of information the Application holds about you, including stored authorization credentials and any related logs, email mail@lavishgupta.com from the Google account email address you used to connect, so that the request can be verified. Requests are handled manually by the developer; there is no automated self-service deletion tool.

You should also revoke access in your Google Account as described above. Deleting data held by the Application does not delete anything in your Gmail account itself, nor content held by your AI assistant provider.

13. Children's Privacy

The Application is not directed to children under 13, or to the minimum age required by applicable law in your country, and is not intended for their use. Information from children is not knowingly collected. If you believe a child has used the Application, contact mail@lavishgupta.com and it will be removed.

14. Changes to This Privacy Policy

This Privacy Policy may be updated, for example if the Application's functionality or data practices change. The updated version will be posted on this page with a new "Last updated" date. If the Application's use of Google user data changes materially, the policy will be updated before that change takes effect.

15. Contact Information

Questions about this Privacy Policy, or requests relating to your data, can be sent to:

Lavish Gupta
mail@lavishgupta.com