Privacy Policy

Effective Date: Jan 01, 2026 Last Updated: Jul 12, 2026

This Privacy Policy describes how Path and Planning LLC ("we," "us," or "our") collects, uses, and protects information in connection with [Application/Server Name] (the "Service"), a Model Context Protocol (MCP) server that connects to Google Workspace accounts (including Gmail, Google Calendar, and Google Drive) on behalf of an authorized user.

1. Who This Applies To

This Service is operated for use by [its owner / a limited set of authorized users — edit to match your actual situation, e.g. "a single authorized user, the operator of this Service"]. It is not intended for use by the general public.

2. Information We Access

When you connect your Google Account to the Service via OAuth 2.0, we may request access to: Gmail data — to read, search, and/or send email on your behalf, limited to the scopes you explicitly grant. Google Calendar data — to read and/or create calendar events, limited to the scopes you explicitly grant. Google Drive and Docs data — to read, search, and/or create files, limited to the scopes you explicitly grant. We only request the specific OAuth scopes needed for the features you use. You can review exactly which scopes are requested on Google's consent screen before granting access, and you can revoke access at any time (see Section 6).

3. How We Use Information

Information accessed through your connected Google Account is used solely to: Fulfill requests you make through the Service (e.g., retrieving an email, creating a calendar event, reading a document). Provide responses or perform actions you have directly initiated. We do not: Sell, rent, or trade your data to third parties. Use your Google Workspace data to train machine learning models. Use your data for advertising purposes. Share your data with third parties except as described in Section 4.

4. How We Share Information

We do not share data obtained through Google APIs with third parties, except: With your direction — when an action you request necessarily involves sending information to a destination you specify (e.g., sending an email to a recipient you name). For legal reasons — if required to comply with a valid legal process, protect against fraud, or protect the rights, property, or safety of the Service operator, users, or others. Service providers — infrastructure providers (e.g., hosting platforms) that process data solely to operate the Service, under obligations consistent with this policy.

5. Data Storage and Security

Access and refresh tokens are stored securely and are not shared with unauthorized parties. We apply reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. The Service does not persist the content of your Gmail, Calendar, or Drive data beyond what is necessary to complete the requested action, except where you have explicitly configured caching or storage as part of the Service's functionality.

6. Revoking Access

You may revoke the Service's access to your Google Account at any time via Google Account permissions. Revoking access will prevent the Service from accessing your Google Workspace data going forward.

7. Data Retention and Deletion

We retain data only as long as necessary to provide the Service or as required by law. You may request deletion of any data we hold that is associated with your account by contacting us at the email below.

8. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last Updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

10. Google API Services User Data Policy

Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

11. Contact Us

For questions about this Privacy Policy or to request data deletion, contact: Path and Planning LLC info@pathandplanning.com