KobBoss privacy policy

Last updated: 4 November 2026.

Who runs KobBoss

KobBoss is a personal assistant run by KobBoss AI, a private project. It is separate from any other business. Contact: kobbossai@gmail.com.

What Google account information KobBoss accesses

When an owner connects a Google account, KobBoss requests read-only access to Gmail (the https://www.googleapis.com/auth/gmail.readonly scope). It uses this to:

• read the account's email address, so KobBoss can show which account each result belongs to;
• list and search the account's messages, and read the content of messages the owner asks about.

KobBoss does not request permission to send, change, label, move or delete email. Google's consent screen shows the exact permissions before the owner approves them.

Why this access is needed

The owner asks KobBoss questions such as "find my latest email from a shop" or "summarise today's messages". To answer, KobBoss must read the relevant messages.

How OAuth credentials and tokens are handled

• The owner's Google OAuth client ID and client secret are stored in the Windows Credential Manager on the owner's PC.
• Access and refresh tokens that Google issues are stored in the same Windows Credential Manager, one separate entry per connected Gmail account, so accounts are kept apart.
• KobBoss refreshes access tokens with Google when they expire, using the stored refresh token.
• KobBoss's log entries for Google connections name the plugin and the kind of error. They do not record token values.

Storage, protection and deletion of Google user data

• KobBoss does not run a server that stores Gmail content. Messages are fetched from Google when requested.
• Message text that the assistant reads is recorded in KobBoss's chat history on the owner's PC, so it can be shown again later.
• Disconnecting Gmail in KobBoss revokes every connected Gmail account's tokens with Google and deletes the stored tokens on the owner's PC. KobBoss does not currently offer disconnecting one Gmail account at a time.
• Chat history that already contains message text is not removed by disconnecting. The owner can delete chat history in KobBoss.

Sharing with third parties

KobBoss sends Gmail requests only to Google's Gmail service. Message text that the assistant reads can be sent to the AI model provider the owner has configured, in order to answer a question. KobBoss does not sell, rent or otherwise share Google user data with anyone else.

How to revoke access

• In KobBoss, open Plugins, choose Gmail and disconnect it. This removes all connected Gmail accounts from KobBoss.
• Or remove KobBoss under your Google Account's third-party access page: myaccount.google.com/permissions.

Contact

Questions or requests about this policy: kobbossai@gmail.com.