Privacy Policy

Overview

M-5 is a private AI assistant. This policy explains how the M-5 Google Workspace Integration accesses, uses, stores, and protects information obtained through Google APIs.

Information accessed

M-5 may access information from the Google account that its owner explicitly authorizes, including:

• Gmail messages, metadata, labels, and drafts
• Google Calendar events and calendars
• Google Drive files and metadata
• Google Docs and Sheets content
• Google Contacts and profile information

The precise access depends on the OAuth permissions granted by the account owner.

How information is used

Google user data is used only to perform tasks requested or authorized by the account owner, including reading or organizing email, preparing drafts, managing calendars, working with files and documents, accessing contacts for authorized communications, and maintaining task continuity and verified operational records.

Storage and security

OAuth credentials and related secrets are stored in access-controlled secret-management systems. Google user data may be processed temporarily to complete requested tasks. Relevant information, summaries, or operational records may be retained when needed for task continuity, auditability, or authorized memory systems.

Access is limited to the account owner, the M-5 assistant, and infrastructure administrators authorized by the account owner.

Sharing and disclosure

M-5 does not sell Google user data, use it for advertising, or share it with data brokers. Information may be disclosed only at the account owner's direction, to service infrastructure required for an authorized task, when legally required, or when necessary to protect the security of the account or system.

Google API Limited Use

M-5's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Retention and deletion

Information is retained only as needed for authorized operations, task continuity, security, or audit records. The account owner may revoke M-5's access through Google Account security settings.

Requests to delete retained Google-derived information can be sent to michael5ekker@gmail.com.

Changes

This policy may be updated when M-5's capabilities or data practices change. The effective date above identifies the latest revision.