Comms Local Gmail Privacy Policy
Last updated: October 26, 2026.
Comms Local Gmail is a personal desktop command-line utility operated by John Marcel Williams for his own communications search and reply planning. This policy describes the utility's handling of Google user data.
Data accessed and purpose
After the owner authorizes Google's Gmail read-only permission, the utility reads message and thread identifiers, email addresses and participant information, headers and subjects, timestamps, labels, email body text, and attachment information. It may fetch a separately stored text or HTML body part to obtain the email's text. It does not provide a general binary attachment download feature.
This data supports local search, conversation review, summaries and identifying possible unanswered messages. The default initial Gmail review covers 21 days; the owner can request a different review window. The CLI cannot send mail, create drafts, change labels, change read status or delete messages from Gmail.
Storage and security
A searchable SQLite index is stored on the owner's Mac in a local cache directory. Google OAuth credentials are stored separately in the Mac's local application-support directory. The program restricts the credential directory to the owner and credential files to owner read/write access. Google API and token requests use HTTPS.
The CLI does not independently encrypt its local database or credential files. Protection also depends on the Mac account, device encryption when enabled, and any copies or backups the owner creates. Credentials are not included in normal command output.
Sharing and assistant use
The CLI does not sell Google user data, use it for advertising or model training, operate a hosted mailbox service, or automatically send it to an AI model API. It communicates with Google to authorize access and read Gmail.
If the owner explicitly asks a separate assistant to analyze communications, the owner may provide selected messages or CLI results to that assistant for search, summaries or reply planning. That separate service processes the provided material under its own terms, privacy policy and the owner's settings. This policy does not claim or control that provider's retention or model-training settings.
Retention and deletion
Local indexed records remain until removed by a successful reconciliation or deleted by the owner. There is no fixed automatic retention deadline. Successful syncs reconcile the changes and deletions they cover; records outside a fully reviewed window, older exports and backups may remain. A failed sync retains the previous local records rather than treating an incomplete download as current.
The owner can stop using the utility, remove its connection through Google Account third-party connections, and delete the utility's local index, credential files, exports and any separately retained copies. Revoking Google access stops future authorized reads; it does not erase copies already stored locally or material the owner provided to a separate service.
Google API data commitments
Comms Local Gmail's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Contact and changes
Questions about this policy or data handling can be submitted through the contact page. Any material change to the utility's use of Google user data will be disclosed here, with renewed consent before a newly disclosed use.