Privacy policy
The vvvp connector connects Claude, Anthropic's AI assistant, to the Google accounts of its owner. It is operated by Alt-Shift AB (org. nr 559380-8404) for its owner's own use, and is not offered to anyone else. Questions about this policy, or about personal data the connector handles, go to privacy@altshift.se.
What it reaches
Only the Google accounts its owner links to it, each through that account's consent on Google's own consent screen, and only when its owner asks Claude to act in one:
- Gmail: searching and reading mail and its attachments, labelling, archiving and trashing it, writing drafts, and sending, replying and forwarding.
- Google Drive: searching, reading and downloading files, creating them, changing their content and names, moving them, and trashing them.
- Google Calendar: reading calendars and their events and when people are busy, and creating, changing, deleting and answering events.
What it keeps
For each linked account, its address, when it was linked, and the refresh token Google issued on its consent. These are kept in Google Cloud Secret Manager, encrypted at rest, where the service may read them and not change them.
It keeps no mail, files or events. What it reads is handed to Claude in its answer and not stored. Two things are held briefly, in memory: the text of a PDF it has read, for up to ten minutes, so that a long one can be read in parts; and an account's list of Gmail labels, for up to five minutes. To read a PDF's text it converts the PDF into a Google Doc in the same account's Drive, and deletes that Doc within the same request.
A link it gives to download an attachment or a file is valid for ten minutes and reads that one file.
What it logs
Which tool was called and whether it succeeded, which Google account a download was from and its size, and the requests the connector serves and makes, without their content. The content of mail, files and events, and credentials, are never logged.
Who it is shared with
What the connector reads is shown to Claude, which its owner uses it with; Anthropic handles it under its owner's agreement with Anthropic. It is not sold, not used for advertising, not used to train any model by the operator, and not shared with anyone else.
The connector's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Unlinking
An account is unlinked by its owner, which revokes its consent at Google and deletes its refresh token, earlier copies included. Consent can also be withdrawn at any time at myaccount.google.com/permissions.