Privacy Policy

Last updated 25 August 2026

This policy covers Homelab Workspace MCP, a private application operated by Craig Rowe at craigrowe.net. The application has a single user: its operator. It is not offered to the public and has no other users.

What it accesses

With the operator's explicit Google authorisation, the application requests:

• Gmail — read messages, threads and labels; modify labels; create drafts. The scope to send mail is deliberately not requested.
• Google Calendar — read and write calendar events.
• Google Drive — read and write files.

How the data is used

Data is fetched from Google's APIs on demand, in response to a request the operator makes in his own self-hosted chat interface, and is used only to answer that request. It is not used for advertising, profiling, analytics, model training, or any purpose beyond the feature the operator asked for.

Storage and retention

The application stores OAuth access and refresh tokens so it does not need to re-authorise on every request. These are held on an encrypted volume on a server in a private residence, readable only by the account that runs the service.

Message content, calendar entries and file contents are not written to any database. They pass through memory to answer a request and are then discarded. Chat transcripts may retain whatever the operator asked about, in the operator's own self-hosted chat application, on the same private hardware.

Sharing

None. No data is sold, rented, shared, or transmitted to any third party. No third-party analytics, trackers or advertising services are used. Nothing leaves the operator's own equipment except calls to Google's own APIs.

Revoking access

Access can be withdrawn at any time from Google Account permissions, which invalidates the stored tokens immediately.

Contact

craigtrowe@gmail.com