Privacy policy

Last updated 9 November 2026

Who runs it

harness mail is operated by Mysty Magistus for personal use. Contact: mysty0000@gmail.com.

What it accesses in your Google account

When you sign in, harness mail asks Google for permission to:

• read your Gmail messages, labels and settings (the gmail.readonly scope), so the agent can search and open threads you ask about;
• create and edit drafts in your Gmail (the gmail.compose scope), so the agent can save a reply for you to review.

Google's compose scope can technically also send mail. harness mail does not use that ability: the connector has no code that calls Gmail's send methods, and drafts stay in your Drafts folder until you send them yourself from Gmail.

It also receives your Google account email address, so it can tell your accounts apart.

How the data is used

Mail is read only when you ask the agent a question that needs it, and only to answer that question or to write the draft you asked for. It is not used for advertising, profiling, or to train any model, and it is not sold.

Where the data lives

• On your computer. The OAuth tokens that let the connector reach your Gmail are stored in the credential store of the harness installation on your machine. Messages the agent reads become part of that session's local history on your machine.
• On this website: nothing. This site is static pages. It has no accounts, no database, no analytics and no cookies, and it never receives your mail or your tokens. Your browser does fetch the typeface from Google Fonts when you open a page, which sends your IP address to Google.

Who else sees it

The agent works by sending text to the language model provider you configured in harness. When you ask it about your mail, the messages it opens are included in that request, so the provider receives that text. This is what makes the feature work, it only happens at your request, and which provider receives it is your choice. No one else receives your Gmail data: it is not shared with advertisers, data brokers or any other third party.

Google API Services User Data Policy

harness mail's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Data from Gmail is used only to provide the user-facing search and draft features described above.
• It is transferred to others only to provide those features (the model provider you chose), to comply with law, or as part of a merger or sale with your consent.
• It is not used to serve advertising, and it is not sold.
• People do not read it, except with your consent, to investigate abuse, or where the law requires.

Retention and deletion

The connector keeps your access token until you remove it, and keeps session history on your machine for as long as you keep that session. To delete your data, delete the stored credential and the sessions in your harness installation. There is nothing to delete on this website, because it holds nothing about you.

Removing access

You can withdraw harness mail's access at any time at myaccount.google.com/permissions. Removing it there makes the stored tokens useless straight away.

Changes

If this policy changes, the date at the top changes with it. Any change that widens what is accessed will need you to sign in again and approve it.

Contact

Questions about this policy: mysty0000@gmail.com.