Privacy Policy — Kosmos

Last updated: 25 August 2026

Kosmos is a private, single-user personal-automation tool operated by Juan Pablo Bermúdez. It is not a public product or service: it is used solely by its operator to manage their own personal information. This policy explains how Kosmos handles data obtained through Google APIs.

What data Kosmos accesses

With the account owner's explicit consent through Google's OAuth flow, Kosmos accesses that owner's own Google account data via the following Google Workspace APIs:

• Gmail — reading and sending messages on the owner's behalf (e.g. drafting and sending emails, reading digests).
• Google Calendar — reading and managing the owner's events.
• Google Drive, Docs and Sheets — reading and editing the owner's own files.

Kosmos only ever accesses the account of the person who authorises it. It does not access anyone else's data.

How the data is used

Data is used exclusively to provide the account owner's own personal knowledge-management and productivity automation — for example, drafting emails, organising notes and calendar entries, and reading or updating the owner's documents. Processing happens locally on the operator's own device.

Storage and retention

OAuth access and refresh tokens are stored locally on the operator's own device. Kosmos does not run third-party servers and does not store the owner's Google user data on any external service. The account owner can revoke Kosmos's access at any time via Google Account permissions; on revocation, the stored tokens cease to function and are deleted.

Sharing and disclosure

Kosmos does not sell, rent, or share Google user data with any third party. The data is not used for advertising, and is not used to train generalised artificial-intelligence or machine-learning models.

Contact

Questions about this policy can be sent to bbabo4708@gmail.com.