GmailVibe data and access

GmailVibe accesses your Gmail account only after Google consent. The gmail.modify permission allows searching and reading messages, preparing drafts, replying, sending, and changing read or archived status. It does not permit immediate permanent deletion. You can revoke access at any time.

Starting a conversation does not automatically send email bodies to the model. A voice-requested search sends result headers and short snippets to Gemini; a message body is sent only when opened to answer your request. GmailVibe shows the consulted message or action in a contextual preview. This data is used solely to provide the features you requested, never for advertising or sale.

Microphone audio goes directly from your browser to Gemini Live using a short-lived token. Captions remain in the tab's memory. kayaXstudio does not retain conversation audio or transcripts. Google processes data sent to Gemini under the terms applicable to the service used. Gemini API Terms.

To connect your account, the server stores your email address, granted permissions, an encrypted refresh token, and an HTTP-only session. The Google token is sent neither to the browser nor to Gemini. Action proposals are encrypted, bound to your account, and expire after ten minutes. Their outcome may be retained briefly to prevent duplicate sends. An uncertain network result is never retried automatically.

Before any change, the assistant reads back the details and asks for an explicit spoken confirmation phrase. An ambiguous answer or interruption triggers nothing. You can say “cancel”. Before sending an email or reply, the recipient, subject, and complete text are read back.

“Disconnect Gmail” removes local authorizations and sessions and requests revocation from Google. You can also request deletion of GmailVibe-related data at contact@kayaxstudio.com. Public Gmail access awaits Google's OAuth and security review. contact@kayaxstudio.com.