# Privacy Policy — desk-steward

**Effective date:** 2026-10-21
**Data controller:** Gonzalo Martínez García
**Contact:** privacy@gonzaloapps.es

## Summary

desk-steward is a personal assistant that runs on its developer's own computer.
It keeps the developer's mail and browser in order, following the developer's
instructions and written guides. The language model that interprets those
instructions runs on that same computer: no email and no page is sent to a
third-party artificial intelligence service. It is not a product distributed to
other people: only its developer uses it, with the developer's own accounts.

## What data it uses and why

- **Gmail.** With the permission the account itself grants through Google, the
  application searches, reads, labels, archives, stars and marks as read the
  messages of that account, and prepares drafts. Only when the account holder
  instructs or approves it does it send or reply to messages, report them as spam
  or move them to the bin. Data is read only to carry out the instruction being
  executed.
- **Domain mailbox.** With the password the account holder stores in the
  operating system's credential store, the application reads the folders and messages
  of that mailbox.
- **Browser.** Through its Chrome extension, the application sees the titles and
  addresses of tabs, tab groups and bookmarks, and puts them in order. It does
  not read the content of web pages and has no permission to do so.
- **Downloads.** Only those the account holder asks for, into a dedicated
  downloads folder. The application never opens or runs what it downloads.

## What it keeps on the computer

- **Operations journal.** Every change it makes, with the state before and after
  of the objects it touched: message identifiers and their labels, and the
  titles and addresses of tabs, groups and bookmarks. For a sent message it keeps
  the recipients and the subject, and
  of the body only a fingerprint from which the text cannot be rebuilt. It exists
  to check every change and to be able to undo it.
- **Technical logs.** Messages from the program itself and from the model
  server, which do not keep the text of any email.
- **Credentials.** The access to Google and the domain mailbox password are kept
  in the operating system's credential store, never in files and never in the model's
  context.

All of this stays on the account holder's computer. The messages themselves stay
in Gmail or in the domain mailbox: the application makes no copies of them,
except the attachments the account holder asks it to download.

## Who it talks to

Only to Google, through the Gmail API, and to the domain's mail server, in
both cases to carry out an instruction of the account holder. The
developer runs no server and receives no copy. There is no analytics, telemetry,
crash reporting or advertising.

## Limited use of Google data

desk-steward's use and transfer to any other app of information received from
Google APIs will adhere to the Google API Services User Data Policy, including
the Limited Use requirements. In particular:

- Gmail data is used only for the features the account holder sees and asks for;
- it is not transferred to third parties, except to Google and to the domain's
  mail server to carry out an instruction;
- it is not used for advertising;
- no person reads it except the account holder;
- it is not used to develop, improve or train generalised or personalised
  artificial intelligence or machine learning models.

## Revoking access

The application's access to Gmail can be revoked at any time from the Google
account, under security, third-party connections. The domain mailbox password is
removed from the operating system's credential store.

## Children

desk-steward is not directed at children nor at anyone other than its developer.

## Retention

The operations journal, the logs and the downloads are kept on the account
holder's computer until they delete them. The developer receives nothing, so it
keeps nothing from the application.

## Your rights

desk-steward is used within its developer's personal and household activity.
Even so, if a message of yours reached one of their accounts, the application
may have read or filed it on their computer, as their mail client would, and you
can ask about it or ask for whatever it keeps to be deleted by writing to
privacy@gonzaloapps.es.

## Changes

If a future version handles data differently, this policy will be updated before
that version is used and its effective date will change.

## Contact

Questions about this policy: privacy@gonzaloapps.es

You can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es)
or with your local supervisory authority.