Privacy policy

Milo is a private integration operated by the account owner for their own personal and administrative use.

Information accessed

After authorization, the integration can access the owner's account email address, Gmail messages and metadata, and message attachments. It requests Gmail read-only access and basic identity scopes, not permission to send email or modify or delete mailbox contents.

Purpose and processing

Information is used to search and summarize correspondence, extract requested information, prepare reply suggestions in chat, and organize selected invoices or administrative documents. Reply suggestions are not sent automatically or written into Gmail drafts.

Relevant message content or attachment content may be transmitted to AI processing providers configured by the owner to fulfill these requests. Selected documents may also be copied to the owner's Paperless-ngx archive. Data sent to those services is subject to their applicable retention settings and terms; email data does not necessarily remain solely on the local server.

Google user data is not sold or used for advertising or for training generalized AI models. Milo's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. The operator must select and configure processors consistently with these restrictions.

Storage and retention

Authorization tokens are stored in an encrypted keyring on the owner's server. Downloaded files, selected archived documents, chat history, and operational logs may remain under the owner's configured storage and retention settings. AI providers may retain submitted data according to their applicable settings and terms. This integration does not promise automatic deletion of all copies when access is revoked.

Control and revocation

The owner can revoke this integration in Google Account connections. Revocation prevents continued API access after the authorization ceases to be valid; it does not itself delete previously downloaded files, archived documents, or conversation history. The owner can remove those copies through the relevant local, archive, or provider controls. These actions do not require deleting the original Gmail messages.

Contact and changes

Use the support email displayed on the Google authorization screen for questions about this private integration. This notice must be updated before enabling new uses, permissions, or processors not covered here.