Privacy Policy — desk-steward

Effective date: 2026-10-21 Data controller: Gonzalo Martínez García Contact: privacy@gonzaloapps.es

Summary

desk-steward is a personal assistant that runs on its developer's own computer. It keeps the developer's mail and browser in order, following the developer's instructions and written guides. The language model that interprets those instructions runs on that same computer: no email and no page is sent to a third-party artificial intelligence service. It is not a product distributed to other people: only its developer uses it, with the developer's own accounts.

What data it uses and why

• Gmail. With the permission the account itself grants through Google, the application searches, reads, labels, archives, stars and marks as read the messages of that account, and prepares drafts. Only when the account holder instructs or approves it does it send or reply to messages, report them as spam or move them to the bin. Data is read only to carry out the instruction being executed.
• Domain mailbox. With the password the account holder stores in the operating system's credential store, the application reads the folders and messages of that mailbox.
• Browser. Through its Chrome extension, the application sees the titles and addresses of tabs, tab groups and bookmarks, and puts them in order. It does not read the content of web pages and has no permission to do so.
• Downloads. Only those the account holder asks for, into a dedicated downloads folder. The application never opens or runs what it downloads.

What it keeps on the computer

• Operations journal. Every change it makes, with the state before and after of the objects it touched: message identifiers and their labels, and the titles and addresses of tabs, groups and bookmarks. For a sent message it keeps the recipients and the subject, and of the body only a fingerprint from which the text cannot be rebuilt. It exists to check every change and to be able to undo it.
• Technical logs. Messages from the program itself and from the model server, which do not keep the text of any email.
• Credentials. The access to Google and the domain mailbox password are kept in the operating system's credential store, never in files and never in the model's context.

All of this stays on the account holder's computer. The messages themselves stay in Gmail or in the domain mailbox: the application makes no copies of them, except the attachments the account holder asks it to download.

Who it talks to

Only to Google, through the Gmail API, and to the domain's mail server, in both cases to carry out an instruction of the account holder. The developer runs no server and receives no copy. There is no analytics, telemetry, crash reporting or advertising.

Limited use of Google data

desk-steward's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Gmail data is used only for the features the account holder sees and asks for;
• it is not transferred to third parties, except to Google and to the domain's mail server to carry out an instruction;
• it is not used for advertising;
• no person reads it except the account holder;
• it is not used to develop, improve or train generalised or personalised artificial intelligence or machine learning models.

Revoking access

The application's access to Gmail can be revoked at any time from the Google account, under security, third-party connections. The domain mailbox password is removed from the operating system's credential store.

Children

desk-steward is not directed at children nor at anyone other than its developer.

Retention

The operations journal, the logs and the downloads are kept on the account holder's computer until they delete them. The developer receives nothing, so it keeps nothing from the application.

Your rights

desk-steward is used within its developer's personal and household activity. Even so, if a message of yours reached one of their accounts, the application may have read or filed it on their computer, as their mail client would, and you can ask about it or ask for whatever it keeps to be deleted by writing to privacy@gonzaloapps.es.

Changes

If a future version handles data differently, this policy will be updated before that version is used and its effective date will change.

Contact

Questions about this policy: privacy@gonzaloapps.es

You can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with your local supervisory authority.