// What this is
RCI Mail Connector is an internal tool operated by Roderick Consulting Inc., a Texas corporation. It lets RCI's own staff manage email accounts they own or administer — reading, searching, organizing, labeling, archiving, and drafting messages — through RCI's private systems. It is not offered to the public, and only accounts explicitly connected by their owner are processed.
// Information we access
When an account owner connects a Google account, the connector requests the Google permission gmail.modify, which allows it to read, label, archive, and draft email in that mailbox. It may access:
- message headers (sender, recipients, subject, date), message content, and attachments;
- labels and folder state;
- the account's email address.
The connector does not send email unless the account owner approves each individual message.
// How we use it
Data is used only to provide the connector's functions to the account owner: finding, reading, classifying, filing, archiving, and drafting their own mail, and keeping an audit log of every change made. We do not use Gmail data for advertising, we do not sell it, and we do not use it to train general-purpose AI models.
// Storage and security
- OAuth tokens are encrypted at rest; the encryption key is held in a separate secrets vault.
- Access to the connector is restricted to RCI's authorized account owner(s) through single sign-on.
- Every action that changes a mailbox is recorded in an audit log.
- Message content is processed on demand and is not kept in a separate copy, except short excerpts in the audit log and working notes needed to complete a task the owner requested.
// Sharing
We do not share Google user data with third parties, except:
- the AI assistant the owner uses to operate the connector (currently Anthropic's Claude), which receives the content needed to perform the owner's request; and
- when required by law.
// Google API Services User Data Policy
RCI Mail Connector's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
// Retention and deletion
Tokens are kept until the account is disconnected. Account owners can disconnect at any time in the connector, or revoke access at https://myaccount.google.com/permissions; tokens are then deleted. Audit logs are kept for up to 12 months.
// Contact
Questions about this policy: Roderick Consulting Inc., support@roderickc.com.