Gebhard Enterprises
Privacy Policy
Last updated September 24, 2026
This policy covers the private desktop application built and operated by Zach Gebhard (“the application”). The application is a personal tool. It is not offered to the public, has no user accounts, and is used by its author on his own computer.
What the application does
The application connects to the author’s own Google account so that it can read and organize his own mail, files, calendar and documents from his desktop. It acts only on the account that authorized it, and only while it is running on that computer.
What data it accesses
With the account holder’s consent, the application may access, through Google’s official APIs:
- Gmail — reading, searching, labeling, drafting and moving messages to trash. It holds no permission to send mail.
- Google Drive — listing, reading, creating and updating files, and moving files to trash.
- Google Calendar — reading, creating, updating and canceling events.
- Google Docs and Sheets — reading and editing documents and spreadsheets.
The application cannot permanently delete anything. Mail and files are moved to trash and calendar events are canceled, so every action it takes can be undone from Google’s own interfaces.
Where the data goes
Nowhere. The application runs entirely on the author’s computer and talks directly to Google. There is no server, no database and no hosted component. Data retrieved from Google is held in memory while the application is in use and is not transmitted to any third party.
Nothing is sold, shared, rented, or used for advertising, profiling or model training.
Credentials and storage
Authorization is handled by Google’s standard OAuth flow. The resulting access and refresh tokens are stored in a file on the author’s own computer, readable only by his operating-system account. No password is ever seen or stored by the application.
Withdrawing access
Access can be revoked at any time at myaccount.google.com/permissions, which immediately invalidates the stored tokens. Deleting the local credential file has the same effect on the computer itself.
Google API Services User Data Policy
The application’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Children
The application is not directed at children and is not used by anyone other than its author.
Changes
If what the application does changes, this page changes with it, and the date above is updated.
Contact
Questions about this policy may be sent to zachgebhard@gmail.com.