Privacy Policy
Last updated: October 7, 2026
This policy covers the personal automation tools run by Chris Milazzo on chrismilazzo.com and a self-hosted home server, including the "Email Scam Guardian" Google OAuth app. These tools are private, non-commercial, and used only by Chris Milazzo and members of his family who have explicitly authorized them.
What the Email Scam Guardian does
With the account owner's permission, the app reads new messages in an authorized Gmail account to detect scams and phishing aimed at an elderly family member. It can add a label to messages it has reviewed and delete messages that are confirmed to be fraudulent.
Data accessed
- Email metadata: sender, recipient, subject, and date.
- Email content: message body text and attachment file names.
How data is processed
- Every message is first analyzed by a language model running locally on a privately owned server. This step does not send email content to any third party.
- Messages the local model flags as suspicious are sent to Anthropic's Claude API for a second review. Anthropic processes this data under its commercial terms and does not use API inputs to train its models.
- For confirmed scams, a summary record (sender, subject, analysis results, and action taken) is written to a private Google Sheet and emailed to the administrator.
Storage and retention
Workflow execution logs, which can include email content, are stored on the private home server. They are kept only as long as needed to operate and troubleshoot the tool. OAuth tokens are stored encrypted on the same server.
Sharing
Data is never sold, used for advertising, or shared with anyone other than the processors listed above. Only Chris Milazzo has access to the data.
Google user data
This app's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
Revoking access
The account owner can revoke the app's access at any time at myaccount.google.com/permissions. Contact Chris to have stored data deleted.