Last updated: November 3, 2026
M365 gateway is a personal tool that runs only on the owner's own computer. Only accounts that belong to the owner or members of his household sign in to it.
When an account holder signs in, the gateway can read and act on that account's Gmail, Google Drive, Docs, Sheets, Calendar and Contacts, within the permissions shown on Google's consent screen.
The gateway stores a Google OAuth refresh token for each signed-in account in the macOS Keychain on the owner's computer. It never stores passwords. Data fetched from Google is processed locally and is not sent to any other server.
No data is sold, shared with third parties, or used for advertising. Use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
An account holder can revoke access at any time at myaccount.google.com/permissions. The stored token stops working immediately, and the owner can delete it from the gateway on request.