Privacy Policy

Last updated 28 September 2026

This policy covers two separate things: the public website at mtpflow.com, and a private internal application that MTP Flow, LLC uses to work with its own Google Workspace and Gmail data. They are described separately because they handle information very differently.

1. The website

mtpflow.com is a static site. It sets no cookies, runs no analytics, embeds no trackers, loads no third party scripts, and contains no forms. Nothing about your visit is recorded by us.

The only interactive elements are email and telephone links. If you choose to write or call, we receive what you send us, including your email address or phone number, and we keep that correspondence so we can reply and maintain our business records. We do not add you to a mailing list and we do not sell, rent, or share your message with anyone.

The site is served by a hosting provider that, like all web hosts, processes connection data such as IP addresses in order to deliver pages and protect against abuse. The logo in our email signatures is loaded from this site, so the same connection data is processed when an email from us is opened. We do not access that data for marketing and we do not combine it with anything else.

Do Not Track

Because the site does not track visitors over time or across other sites, there is nothing for a browser's Do Not Track signal to switch off, and the site behaves the same whether or not the signal is sent.

Your information

To see, correct, or ask us to delete correspondence we hold from you, email dara@mtpflow.com. We will respond within 30 days. Some records may need to be kept where the law or our professional obligations require it, and we will tell you if that applies.

2. The internal Google application

MTP Flow, LLC operates a private, internal-use application that works with the Google accounts owned by MTP Flow, LLC and its principal. It is a command line tool used to search our own mail and calendars for our own business and accounting records, and to prepare and send our own correspondence.

It is not a product, it is not offered to clients, and it has no users other than the account owner. There is no sign up, no server, and no shared instance. It is published through Google only because Google requires an application registration before an account owner can grant access to their own data.

What it accesses

gmail.readonly, to search and read messages and their attachments
calendar.readonly, to read calendar events
gmail.compose, granted on one account owned by the principal, to prepare drafts and send messages on the account owner's instruction

The application cannot delete or alter mail it did not create, and it cannot change a calendar entry. The only mail it can send is mail the account owner has directed it to send, from that one account.

Where the data goes

The application runs entirely on the account owner's own computer.
Message and calendar content is used in memory and written only to local files on that computer, under the account owner's control.
The account owner uses an AI assistant, Anthropic's Claude, to run the application and to read and summarize results on the owner's behalf. Content the assistant reads is sent to Anthropic to produce that response. It is not used to train AI models.
Apart from that assistant, no message content, calendar content, or account data is transmitted to MTP Flow, LLC, to any server we operate, or to any other third party.
Authorization tokens are stored locally in the account owner's user profile. They are not backed up to shared storage and are not shared with anyone.

Retention and revocation

Local copies are kept only as long as the underlying business or accounting need requires, and are deleted when it ends. Access can be revoked at any time from Google Account permissions, which immediately and permanently ends the application's access.

Google API Services Limited Use

MTP Flow, LLC's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not use it to develop, improve, or train generalized AI or machine learning models, we do not transfer it except as described above or as required by law, and we do not allow humans to read it except with the account owner's explicit consent, for security purposes, or as required by law.

3. Children

Neither the website nor the application is directed to children under 13, and we do not knowingly collect information from them.

4. Changes

If this policy changes, the revised version will be posted here with a new date at the top.

5. Contact

Questions about this policy can go to dara@mtpflow.com, or by post to the address below.