Midori privacy policy

Last updated 7 November 2026.

Who this covers

Midori is a private operations assistant run by a small team in New Zealand. It is used only by that team, on Google accounts the team owns or administers. It is not offered to the public.

What Midori accesses

When an account owner connects a Google account, Midori can read the messages in that Gmail mailbox and, when the owner instructs it, send email from that mailbox. Midori requests only the Gmail read and send permissions it needs.

How the data is used

Email content is used only to notify the account owner of new messages, summarise them, and draft or send replies the owner has asked for. It is not used for advertising, not sold, not shared with third parties, and not used to train generative AI models. A person only reads mailbox content when the account owner asks for it.

Storage and security

The access token is stored on a private server in a file readable only by the service. Message content is processed to answer a request and is not kept as a separate copy beyond short-lived alert summaries. Every send is logged.

Google API Services User Data Policy

Midori's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access and deletion

The account owner can revoke Midori's access at any time at myaccount.google.com/permissions. To ask for stored data to be deleted, email midoricredit@gmail.com.

Contact

midoricredit@gmail.com