Gmail Access Policy

Last updated — 3 October 2026 · Operated by Nexor Sparks

In short: optional and off by default. Read-only. Kashish looks at a few matching emails only when you ask about your inbox, does not keep them, and you can disconnect any time.

1. What access we ask for

Read-only access to your Gmail (https://www.googleapis.com/auth/gmail.readonly). Kashish cannot send, delete, move, label or change any email, and cannot change your Gmail settings.

2. Why we need it

So you can ask things like "show my unread emails" or "what did this sender write today" and get an answer inside Kashish. Without read access to your messages this feature cannot work. A narrower scope would not let Kashish read message text.

3. When Kashish reads your email

Only after you connect Gmail, and only when you send a message that is clearly about your own mailbox. Kashish does not read your email in the background, at sign-in, or on a schedule.

4. What exactly is read

Data	Details
Emails	Up to 8 messages that match your request (for example unread, from a sender, or today)
Per email	Sender, subject, date, whether it is unread, and the first part of the text (about 1,500 characters), or the short preview if there is no text
Attachments	Not downloaded and not read

5. How it is used

That email text is sent together with your question to an AI model, only to write the answer you see on screen. Email text is treated as untrusted content, so instructions hidden inside an email are not followed.

6. What we store

The Google access token stays in your browser's memory only, for about an hour. It is not saved on our servers, in our databases or in browser storage.
We do not copy or keep your mailbox. The only thing saved on your device is a simple "Gmail connected" flag so Settings can show the right button.
Kashish's reply may mention details from your emails. Like every reply, it is saved in your chat history until you delete that chat or your account. See Data Deletion.

7. Who processes it

To write a reply, the email text and your question are processed by the AI providers that power Kashish, acting as service providers for that single request. These are Google (Gemini), Groq and Cloudflare Workers AI, and where we enable them, open-weight model providers such as Cerebras and OpenRouter. We do not allow them to use Gmail content for advertising, and we do not use it to train generalised AI models.

8. What we never do

Sell or rent your Gmail data, or use it for ads.
Let people read your emails, except where you ask us to look at a specific message, for security or abuse investigation, or where the law requires.
Use it for anything other than answering your own request.

9. Turning it off

In Kashish: Settings → Gmail → Disconnect (also revokes the token with Google).
In Google: myaccount.google.com/permissions → Kashish → Remove access.

10. Limited Use

Limited Use disclosure. Kashish's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

11. Contact

help@kashishai.com. See also the Google User Data Policy and the Privacy Policy.