Privacy policy
Research Workspace is a local Mac research prototype operated by Simon Cuthbert. This policy describes this app, not other services on botshelf.dev.
Information the app uses
With your consent, the app uses your account identifier and email address, reads email message content and metadata, and reads selected Outlook calendars. Its usual cache covers the recent 30 days, up to 500 messages per account, and the next 30 days of Outlook events. Attachments are not indexed. Google Calendar and iCloud are excluded.
When you approve a draft, the app uses the sending account, recipient, subject and message body to ask the selected mail provider to send that exact message. It keeps the draft and its approval and submission status locally.
Storage and retention
Provider sign-in tokens are stored in macOS Keychain. Cached messages, events, findings and drafts are stored in your Mac’s Application Support folder, protected by local file permissions. The cache is not separately encrypted by this app. New successful syncs replace the relevant cache; failed syncs can leave the previous cache until a later successful sync or disconnection.
Disconnect removes that account’s saved mailbox sign-in and local cached data, findings and drafts. It does not delete original email or calendar data at the provider. You can separately revoke the app’s consent in your Google or Microsoft account settings. Disconnect all accounts removes all local mailbox connections.
Optional sharing with AI providers
Codex and Claude access is off by default for each account. When you enable a provider and run a research task, its native client may transmit cached source content and research prompts to OpenAI or Anthropic under your account and subscription. The local bridge does not provide provider sign-in tokens to the AI clients. Research Workspace does not change those clients’ global privacy, retention or billing settings.
Gmail data may be used only to provide the requested user-facing research and drafting features. It must not be used to train or improve generalized AI models. Before enabling AI access for Gmail, configure the chosen provider’s data controls accordingly and ensure the account is authorized for this use. Research Workspace’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Other data use
The app does not sell mailbox data, use it for advertising or upload it to a Research Workspace mailbox server. The operator does not receive your mailbox through these information pages. Mail services and enabled AI providers process information under their own applicable policies. These public information pages use Cloudflare hosting, which may process request and connection metadata to deliver and protect the site.
Safety and control
Email and calendar content is treated as untrusted source information. The app displays plain text and does not run source scripts or attachments. AI suggestions can still be wrong or influenced by malicious content. Review every proposed message; the app’s send gate requires your approval for the exact draft.
Contact
For privacy questions or requests, contact simonacuthbert1@gmail.com.
Effective date: 30 October 2026.