Privacy Policy
This policy describes how Agents accesses, uses, stores, shares, and deletes information when an authorized user connects a Google Account or asks Agents to perform work.
Operator and scope
Agents is a privately operated personal productivity and automation service maintained by Tony Krueger. It has no public registration and is intended only for accounts expressly authorized by the operator. This policy applies to data processed through Agents, including data received from Google APIs.
Google user data accessed
Agents may request access to the following categories when the related feature is enabled and the user grants permission:
- Gmail: messages, threads, labels, drafts, and message metadata; actions may include reading, composing, sending, labeling, archiving, moving, or deleting messages.
- Google Drive: files, folders, metadata, permissions, and file contents; actions may include searching, creating, reading, updating, organizing, sharing, or deleting files.
- Google Docs and Sheets: document and spreadsheet content and structure; actions may include creating, reading, editing, formatting, exporting, and deleting content. Deletion of Docs and Sheets files is performed through Google Drive.
- Authorization metadata: OAuth tokens, granted scopes, and technical records needed to keep the connection working and secure.
Agents does not request Google Photos access as part of this integration.
How Google user data is used
Google user data is used only to provide or improve user-facing productivity features requested by an authorized user. Examples include locating a Drive file, editing a document, updating a spreadsheet, drafting or sending an email, or organizing a mailbox.
Agents does not use Google user data for advertising, retargeting, surveillance, credit decisions, sale to data brokers, or unrelated profiling. Agents and its processing providers do not use Google user data, including derived content, to create, train, or improve generalized or shared artificial intelligence or machine-learning models.
Automated and AI-assisted processing
Agents uses automated software and may use configured AI processing providers to interpret requests, summarize information, draft content, or determine the steps necessary to complete a user-requested feature. Only the information reasonably necessary for the requested task is selected for that processing.
When selected Google user data is transmitted to a configured service provider, the transfer is performed solely to deliver the user-facing feature requested by the authorized user. Agents permits this processing only through provider configurations and terms that prohibit using submitted Google user data to train or improve generalized or shared models. Service providers act as processors and are not authorized by Agents to use that data for advertising, sale, surveillance, credit decisions, or unrelated purposes.
Storage and retention
OAuth credentials and operational state are stored on owner-controlled systems protected by access controls and encryption at rest. Task outputs, audit records, and conversation history may be retained when necessary to provide requested features, preserve continuity, investigate errors, or maintain security.
Agents retains Google user data only for as long as needed for those purposes or as required by law. Data that is no longer needed is deleted or allowed to expire. Provider-side transient copies may remain for limited periods defined by the processor's applicable retention terms. Users may request deletion using the contact information below.
Sharing and human access
Agents does not sell Google user data. Data may be transferred only to service providers necessary to deliver a user-facing feature requested by the authorized user and with the user's consent; when necessary to investigate an active security incident; when required by law; or when the user explicitly directs a specific disclosure.
An authorized account holder may review their own data. The operator may inspect another authorized user's specific Google data only with that user's documented affirmative consent for the particular records involved, when necessary to investigate an active security incident, or when disclosure is legally required.
Security
Agents uses encrypted transport, restricted local access, least-privilege operational controls, and protected credential storage. No security measure is perfect, but reasonable technical and organizational measures are maintained to protect data against unauthorized access, alteration, loss, or disclosure.
User control, revocation, and deletion
Authorization can be revoked at any time from the Google Account connections page. Revocation prevents future API access but does not automatically delete data already retained for legitimate operational or legal purposes.
To request deletion of retained Google user data, correction of account information, or information about current access, use the support page. Verified deletion requests will be completed within a reasonable period. Agents will delete covered data from owner-controlled systems and request deletion from applicable processors, subject only to binding legal retention requirements or temporary preservation of evidence needed for an active security investigation. Processor-side transient copies may persist until the processor's disclosed retention period expires.
Policy changes
If data practices materially change, this policy will be updated before the new use begins. Where required, affected users will be notified and asked to provide renewed consent.
Google API Limited Use disclosure
Agents' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Contact
Privacy and data-deletion requests: tony.d.krueger@gmail.com