Privacy policy

Last updated 31 August 2026

Anticus_Broker is a private application used by one individual to access their own Google accounts. There are no other users. This policy describes how the application accesses, uses, stores, and shares Google user data.

What data is accessed

Anticus_Broker requests four read-only OAuth scopes:

• gmail.readonly — message metadata and message content
• calendar.readonly — event details from the operator's calendars
• drive.readonly — file metadata and file content
• chat.messages.readonly — messages in spaces the operator belongs to

The application holds no write scopes. It cannot send mail, create or modify calendar events, or create, modify, or delete files.

How the data is used

Retrieved data is passed to the operator's own AI assistant so it can answer the operator's questions, summarize their schedule, and locate their own documents and correspondence. It is used for no other purpose.

Google user data is not used to train any machine learning model, is not used for advertising, and is not analyzed for any purpose beyond directly answering the operator's requests.

How the data is stored

Anticus_Broker runs on a single private computer on a private network. Data retrieved from Google APIs is fetched at the moment it is needed and held in memory only for the duration of that request. Message bodies and file contents are not written to disk.

The application keeps a local activity log recording the time of each request, the name of the operation performed, and a cryptographic hash of its arguments. That log contains no message content, no file content, and no credential values. It never leaves the machine.

OAuth tokens are stored in the macOS Keychain on that machine, protected by the operating system's own encryption, and are read only at the moment a request is made.

How the data is shared

Google user data is not sold. It is not shared with, transferred to, or disclosed to any third party, with one exception described below.

To answer the operator's questions, retrieved content may be sent to an AI model provider's API for processing. That transfer is a necessary part of the operator's own use of the assistant, is limited to the content required to answer the specific request, and is governed by that provider's terms. No other transfers occur.

Retention and deletion

Because Google user data is not persisted, there is nothing to retain. The local activity log, which contains no user data, is retained for auditing and can be deleted by the operator at any time.

Access can be revoked at any time from the Google Account permissions page at myaccount.google.com/permissions, which immediately and permanently ends the application's ability to read any data.

Contact

Questions about this policy or about data handled by this application can be sent to semper1anticus@gmail.com.