Privacy Policy
Effective date: October 20, 2026
aliaster ("the app") is a personal, non-commercial tool operated by an individual developer for their own use. This policy explains how the app accesses, uses, stores, and shares Google user data.
1. Data we access
With your explicit OAuth consent, the app accesses the following Gmail data of the authorized account:
- Email messages and threads (headers such as sender, recipients, subject, date; message bodies; labels; thread IDs) — to search and read mail addressed to your configured identities/aliases.
- The ability to compose and send messages and replies — only when you (or your own assistant acting at your request) instruct the app to reply or send, under per-identity policies you configure.
- Basic account identity (email address) — to verify which account is bound.
The app also uses a SimpleLogin API key, supplied by you, to list your own aliases.
2. How we use the data
Google user data is used solely to provide the app's user-facing features: finding, reading, replying to, and sending email for your own identities. It is not used for any other purpose.
3. Storage and processing
- All processing happens locally on your own computer. The developer operates no server that receives your Gmail data.
- OAuth tokens and API keys are stored only on your local machine in files readable solely by your user account (file mode 0600). They are never committed to source control or written to logs.
- A local case/audit database may keep message metadata needed to track threads and enforce policies; it stays on your machine.
- Email content may be passed to an AI assistant that you yourself run and authorize, solely to carry out your request.
4. Sharing
We do not sell, rent, or share Google user data with any third party. We do not use it for advertising, and we do not use it to develop, improve, or train generalized or non-personalized AI/ML models. No humans read your data except you, unless required by law or for security purposes with your consent.
5. Limited Use disclosure
aliaster's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. Revoking access and deleting data
- Revoke access at any time at myaccount.google.com/permissions.
- Delete local data by removing the app's configuration directory (e.g.
~/.config/aliaster/), which contains tokens, keys, and the local database. - You may also email us to request help with deletion.
7. Security
Credentials are kept in owner-only files, transmitted only over HTTPS to Google and SimpleLogin, and the app fails closed when credentials or policies cannot be verified.
8. Changes
Updates to this policy will be posted on this page with a new effective date.
9. Contact
隐私政策（中文摘要）
aliaster 是个人自用的非商业工具。经你 OAuth 授权后，它读取授权账户的 Gmail 邮件与线程（头部、正文、标签），并在你指示时代你回复或发送邮件，仅用于这些面向用户的功能。所有数据只在你本机处理和存储，令牌与密钥以 0600 权限保存在本地，不入代码库、不写日志。我们不出售、不共享你的数据，不用于广告，也不用于训练通用 AI 模型。aliaster 对 Google API 所获信息的使用遵守《Google API 服务用户数据政策》，包括有限使用（Limited Use）要求。你可随时在 Google 账户权限页撤销授权，并删除 ~/.config/aliaster/ 以清除本地数据。联系：zonzideka@gmail.com。若中英文不一致，以英文为准。