Privacy Policy

About this OAuth client

Anthony Andrei Tan uses this OAuth client with the Google Workspace CLI (gws), an open-source command-line tool that runs locally. The client is for his own Google accounts. This website describes the setup; it does not receive OAuth tokens or host the CLI.

Data and permissions

Depending on the account and the permissions approved on Google's consent screen, commands may access basic account profile and email information, Gmail messages and settings, Drive files, Calendar events, Docs, Slides, Sheets, Tasks, Google Cloud Platform resources, and Pub/Sub resources. The personal profile also grants access to Apps Script projects and deployments. The profiles do not have identical permissions. The consent screen shows the permissions requested for each authorization.

These permissions allow the CLI to perform the command the account owner runs. Some commands read information; others can create, update, send, or delete information within the approved permissions. The CLI sends requests to the relevant Google APIs, which process the request under Google's terms and privacy policies.

Use, storage, and sharing

Results are returned to the local terminal or program that invoked the command. This website does not collect or retain those results. The account owner may choose to save command output locally. If a command is run through an AI agent or another connected program, its inputs and results may be sent to that program or provider under their own terms.

In the current local setup, both profiles report encrypted storage with the operating-system keyring backend. The CLI documentation describes AES-256-GCM encryption with the encryption key protected by the system keyring. A different computer, environment setting, or storage override can use a different storage method. Command logging is currently off and can be enabled by the operator.

Information received from Google Workspace scopes is used only to carry out commands the account owner runs. It is not sold or used for advertising. Its use will follow the Google User Data Policy, including its Limited Use requirements. The CLI itself does not train AI models with Workspace data. If the operator sends command inputs or results to an AI agent or another service, that service receives them under its own terms and settings; the operator must ensure that use remains within Google's Limited Use requirements.

Website visits

These pages are hosted on MarginGuardPH. The hosting site uses Vercel Analytics and may use advertising or Meta measurement tools as described in its separate MarginGuard privacy policy. Those tools relate to website visits and do not receive Google API responses from the CLI.

Revoking access and deleting local credentials

The account owner can run the CLI's gws auth logout command to remove locally saved credentials and the token cache. To revoke the OAuth client's access in Google, remove it from the account's third-party access settings. Locally saved command output must be deleted from wherever it was saved.

Contact

Privacy questions can be sent to contact@marginguardph.com.

Read the Google API Services User Data Policy and the Google Workspace CLI documentation.