Privacy policy
Privacy policy
Effective 18 October 2026. This policy covers Chaoverse and, in particular, the private single-user dashboard at me.chaoverse.work and what it does with Google user data.
Who we are
Chaoverse is operated by its owner, an individual, for their own use. The only Google account it is connected to is the owner's. Contact: contact@chaoverse.work.
What Google data the app accesses
With the owner's consent, the app has read-only access to Gmail (gmail.readonly). Twice a day it lists inbox threads that changed since its last run (promotions and social mail excluded; at most the last 72 hours and 100 threads), and for each thread that was not already answered by the owner it reads the latest incoming message: sender, subject, date and the beginning of the text (about 1,500 characters). It never sends, deletes or modifies email.
How the data is used
The only purpose is the dashboard feature the owner asked for: deciding which emails need the owner's action and showing them. The data is not used for advertising, profiling, selling, or any other purpose.
Sharing with others
To make that decision, the message excerpt described above is sent to the Anthropic API (the Claude model), which returns a short judgment. It is sent only to provide this feature and is handled under Anthropic's commercial API terms. The data is not given, sold or transferred to anyone else, and no person reads it except the owner, who is the data's owner.
What is stored, where, and for how long
| Stored | For each flagged email: sender, subject, a one-line reason and suggested action written by the model, an optional due date and a link to the message in Gmail. Also the OAuth refresh token that lets the app read Gmail. |
|---|---|
| Not stored | Email bodies and attachments. Message text is held in memory only while a run is in progress. |
| Where | A database and configuration file on a computer owned and controlled by the owner. The dashboard is reachable only after an owner-only sign-in. |
| Retention | Flagged items are deleted automatically after 90 days. The owner can dismiss items at any time. |
Security
Access to the dashboard requires a private sign-in restricted to the owner. Connections use HTTPS. The Gmail refresh token is kept in the server's private configuration, not in the web page or the database.
Your choices: revoking access and deleting data
The owner can revoke the app's access at any time at myaccount.google.com/permissions; the app then cannot read any more email. To have the stored items deleted immediately, or with any question about this policy, write to contact@chaoverse.work.
Google API Services User Data Policy
Chaoverse's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Changes
If this policy changes, the new version will be published at this address with a new effective date.