Google Chat MCP privacy

Optional monitoring uses your connected Google account to send incoming human DMs and explicit mentions of you after you subscribe. Owner outgoing messages in monitored human DMs and retained directly mentioned threads are quiet context; they never trigger a notification. It does not send replies or mark messages read. Unrelated group text and attachment bytes are excluded.

Eligible excerpts, callback routes and signing secrets are stored encrypted separately from OAuth grants. Signals and quiet context are available for 24 hours; receipts last seven days. Quiet context keeps the latest 100 eligible owner messages with excerpts of at most 500 characters, returning up to 20 at a time. Idle encrypted content can remain for seven days plus asynchronous datastore cleanup. Feed metadata links subscriptions to authorized connections while monitoring remains active.

Unsubscribing stops future delivery; requests already sent cannot be recalled. Your original OAuth connection must remain active. Opaque token hashes, encrypted Google grants, expiry and rotation metadata support OAuth; refresh grants expire after 90 days.

Optional administrator consent uses your own current Workspace privileges. Google Chat remains the source of truth; ordinary tools access Chat when you request them.