Gmail 连接器隐私政策
本政策适用于 WorkSwarm 的 Gmail 邮件连接器及其 Google 授权服务。
访问哪些数据
连接器按你在 Google 同意页面授予的权限工作。读取权限用于搜索邮件及读取邮件、会话和邮件元数据，例如主题、发件人、收件人和日期。草稿和发送权限用于读取和编辑草稿，以及按你的指示发送或回复邮件。
数据在哪里处理
连接器从你的 WorkSwarm 运行环境直接请求 Gmail API。WorkSwarm 的授权服务处理授权码、授权范围和令牌，用于建立连接、续期和断开连接。服务加密保存 Google 访问令牌和刷新令牌。邮件正文由 Gmail API 直接返回给连接器。
你让 WorkSwarm 处理邮件时，工具结果中与该操作相关的邮件内容、元数据或草稿内容可能进入当前对话，并发送给该对话配置的模型服务以完成任务。对话记录按你的 WorkSwarm 部署设置管理。使用外部模型时，请查看该部署和模型服务对数据保留的设置。
数据使用限制
WorkSwarm 仅为提供你请求的功能和维护连接安全使用 Gmail 数据，不出售这些数据，也不将其用于广告或训练通用模型。对于通过 Google Workspace 权限取得的数据，WorkSwarm 遵守 Google Workspace 用户数据政策及其 Limited Use 要求。
保留、断开和删除
尚未完成的授权会话五分钟后失效。已连接的授权记录从建立或最近一次令牌刷新起最多有效 180 天，到期后由数据库清理。你在 WorkSwarm 断开连接时，连接器会删除本地连接凭据，并请求删除授权服务中的对应记录。如果服务暂时不可用，可以在 Google 账号的第三方连接设置撤销 WorkSwarm 的访问。
授权记录存放在 Cloudflare D1。过期的记录无法再用于连接，服务会在新的连接请求到来时清理过期记录。删除后的加密记录可能在 Cloudflare 的数据库恢复历史中保留最多 7 天。
断开连接不会删除 Gmail 中的邮件、草稿或此前写入 WorkSwarm 对话的内容。可在 Gmail 中管理邮件，并在你的 WorkSwarm 部署中管理对话。有关访问或删除请求，请联系 openjiuwen.official@gmail.com，请勿在来信中发送密码或授权令牌。
Gmail Connector Privacy Policy
This policy applies to the WorkSwarm Gmail connector and its Google authorization service.
Data accessed and why
With your Google consent, the connector searches and reads messages, conversations, and message metadata such as sender, recipients, subject, and date. With compose access it reads and edits drafts and sends or replies to email at your direction.
Where data is processed
The connector calls Gmail directly from your WorkSwarm environment. WorkSwarm's authorization service processes authorization codes, scopes, and tokens to establish, refresh, and disconnect the connection. It encrypts Google access and refresh tokens at rest. Gmail returns message bodies directly to the connector.
When you ask WorkSwarm to work with an email, relevant tool output can enter your conversation and be sent to its configured model provider to complete the task. Your WorkSwarm deployment manages conversation history. If you use a remote model, check the data retention settings for your deployment and model provider.
Limits on use
WorkSwarm uses Gmail data to provide the features you request and maintain connection security. We do not sell it or use it for advertising or training general-purpose models. WorkSwarm's use of data received through Google Workspace scopes adheres to the Google Workspace user data policy, including its Limited Use requirements.
Retention, disconnection, and deletion
Unfinished authorization sessions expire after five minutes. Connected authorization records expire at most 180 days after connection or the last token refresh and are then cleaned up by the database. Disconnecting in WorkSwarm removes the local connection credential and requests deletion of the corresponding server record. If the service is unavailable, you can revoke access in Google Account third-party connections.
Authorization records are stored in Cloudflare D1. Expired records cannot be used to connect and are removed as new connection requests arrive. Deleted encrypted records may remain in Cloudflare's database recovery history for up to seven days.
Disconnecting does not delete mail or drafts in Gmail or content already in WorkSwarm conversations. Manage those items in Gmail and your WorkSwarm deployment respectively. For access or deletion requests, contact openjiuwen.official@gmail.com. Do not include passwords or authorization tokens.