Multi Gmail MCP is a personal server run by a single owner for their own Gmail accounts. It is not offered to other users.
With the owner's consent it uses the Gmail API scope gmail.modify, plus openid and email to identify which account was connected. Email content is read and modified only to carry out actions the owner requests through their AI assistant, and is not stored by the server.
For each connected account: its email address, an optional alias, and the Google refresh token, encrypted with AES-256-GCM. Nothing else.
No data is sold, shared with third parties, or used for advertising or model training. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Access can be revoked at any time at myaccount.google.com/permissions; the stored token then stops working.