Privacy policy

Last updated 27 October 2026

Who we are

McLeod Home (mcleod.casa) is a private, self-hosted set of services run by Scott McLeod, Oran Park NSW, Australia, for his own household. It is not a commercial service and is not offered to the public. Contact: [email protected].

Whose data

The email assistant ("McLeod Home Mail Assistant") is only connected to Google accounts owned by Scott McLeod. It is not used with anyone else's Google account.

What Google data is accessed

• Gmail: reading message headers, bodies and attachments; managing labels; marking read/unread; archiving, trashing and un-trashing; marking spam; creating, editing and sending drafts (sending only after the owner confirms).
• Google Drive: searching, reading, creating, uploading, updating and trashing files.
• Basic profile: the account's email address, to confirm the correct account is connected.

How it is used

Data is used only to carry out actions the owner asks for: finding and summarising email, organising inboxes, drafting replies and working with Drive files. It is not used for advertising, profiling, selling, or training machine-learning models.

AI processing

When the owner asks his AI assistant (Anthropic's Claude) to work with email or files, the relevant content is sent to that assistant to fulfil the request, under the owner's own Anthropic account. Nothing is sent to any other third party.

Storage and security

• Google sign-in tokens are stored only on the owner's own server in Australia, in a folder readable only by the owner.
• Downloaded attachments or files are kept on that server until the owner deletes them.
• The service is reachable only through an encrypted tunnel and requires the owner's email code plus biometric (Face ID) verification.
• Email content is not otherwise copied, logged or retained.

Sharing

Google user data is not sold, rented or shared with anyone, except the AI processing described above at the owner's request, or where required by law.

Google API Services User Data Policy

McLeod Home's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access

Access can be revoked at any time at myaccount.google.com/permissions. Revoking access stops the service using that account; stored tokens for it are then deleted.

Changes

Any change to this policy will be posted on this page with a new date.