Privacy Policy

How Gmail information is handled · Updated 14 November 2026

This policy applies to HiBean Gmail CLI, a private email integration operated by HiBean. Contact: hibeansup@gmail.com.

Access and purpose

With the mailbox owner's Google OAuth authorization, the integration may access account identity, email headers and bodies, threads, labels, drafts, and attachments. Access is used to carry out the owner's requested email tasks, such as searching, summarizing, drafting replies, and organizing messages. The granted scope may permit more actions than a particular task needs.

Storage and processing

Google OAuth credentials are stored by the local CLI in encrypted form, with its encryption key managed through the operating system keyring in the current setup. Access-token caches are local files protected by operating-system permissions. Email excerpts, attachments, and task results may be retained in local files or in assistant conversation records when needed for a requested task.

AI assistants and service providers

When the owner uses an AI assistant such as Codex, the email content selected for that task may be sent to the configured AI service provider for processing. It is not guaranteed to stay on the local computer. The owner's assistant settings and the provider's applicable data controls and retention terms also apply. The operator must use provider settings consistent with Google's Limited Use requirements and must not use Gmail data to train generalized AI or machine-learning models.

The integration does not sell Google user data or use it for advertising. Data is used or shared only as needed to provide the owner's requested email functionality, meet legal obligations, or protect security, consistent with applicable Google API policies. Email is sent to recipients only on the owner's instruction.

Retention and removal

There is no separate central email database operated by this integration. Local exports and assistant records remain until removed under the owner's file and conversation-retention controls. Revoking access stops future authorized API access; it does not automatically delete prior local exports or assistant records. The owner can remove those copies separately, revoke access in Google Account connections, and clear local CLI credentials. For help with operator-controlled copies, contact the address above.

Google API Limited Use

HiBean Gmail CLI's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

This website

These static pages contain no analytics scripts, forms, or mailbox access. Cloudflare hosts the pages and may process ordinary connection and security metadata, such as IP addresses and request timestamps, to deliver and protect the website.