aliaster

Privacy Policy

Effective date: October 20, 2026

aliaster ("the app") is a personal, non-commercial tool operated by an individual developer for their own use. This policy explains how the app accesses, uses, stores, and shares Google user data.

1. Data we access

With your explicit OAuth consent, the app accesses the following Gmail data of the authorized account:

• Email messages and threads (headers such as sender, recipients, subject, date; message bodies; labels; thread IDs) — to search and read mail addressed to your configured identities/aliases.
• The ability to compose and send messages and replies — only when you (or your own assistant acting at your request) instruct the app to reply or send, under per-identity policies you configure.
• Basic account identity (email address) — to verify which account is bound.

The app also uses a SimpleLogin API key, supplied by you, to list your own aliases.

2. How we use the data

Google user data is used solely to provide the app's user-facing features: finding, reading, replying to, and sending email for your own identities. It is not used for any other purpose.

3. Storage and processing

• All processing happens locally on your own computer. The developer operates no server that receives your Gmail data.
• OAuth tokens and API keys are stored only on your local machine in files readable solely by your user account (file mode 0600). They are never committed to source control or written to logs.
• A local case/audit database may keep message metadata needed to track threads and enforce policies; it stays on your machine.
• Email content may be passed to an AI assistant that you yourself run and authorize, solely to carry out your request.

4. Sharing

We do not sell, rent, or share Google user data with any third party. We do not use it for advertising, and we do not use it to develop, improve, or train generalized or non-personalized AI/ML models. No humans read your data except you, unless required by law or for security purposes with your consent.

5. Limited Use disclosure

aliaster's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Revoking access and deleting data

• Revoke access at any time at myaccount.google.com/permissions.
• Delete local data by removing the app's configuration directory (e.g. ~/.config/aliaster/), which contains tokens, keys, and the local database.
• You may also email us to request help with deletion.

7. Security

Credentials are kept in owner-only files, transmitted only over HTTPS to Google and SimpleLogin, and the app fails closed when credentials or policies cannot be verified.

8. Changes

Updates to this policy will be posted on this page with a new effective date.

9. Contact

[email protected]

隐私政策（中文摘要）