Masuda is a private AI assistant. It uses Google OAuth to connect to the operator's own Gmail and Google Calendar accounts. This page documents what the integration connects to and why.
Who can use it
Masuda accesses only Google accounts that have explicitly authorized it through Google's standard OAuth consent screen. In practice that is the operator's own account. There is no sign-up, no account creation, and no way for an unauthorized account to be connected: access exists only where the account holder has personally completed the consent flow, and it ends the moment that consent is withdrawn.
Masuda is not offered as a public service. It is not a product, it is not sold, and it is not available for general sign-up or for use by third parties.
What it connects to
The assistant requests access to two Google services. The scopes presented on the Google consent screen at the time of authorization are the authoritative list of what is granted; the summary below describes what that access is used for.
Gmail
- Reading and searching mail Retrieving messages, threads, and labels so the assistant can find relevant correspondence on request.
- Summarizing and extracting Condensing long threads and pulling out details such as dates, deadlines, references, and action items.
- Drafting and replying Preparing draft responses, and sending them only when the operator asks for that specific message to be sent.
- Organizing Applying or removing labels and read state to keep the authorized mailbox triaged.
Google Calendar
- Reading calendars and events Listing the calendars on the account and reading their events to answer questions about the schedule.
- Checking availability Querying free/busy information to find open time and detect conflicts.
- Creating and updating events Adding, rescheduling, or amending events on the authorized account when asked to.
How the data is handled
Google data is used only to carry out the tasks the operator asks for. It is never sold, never used for advertising, and never shared for any purpose unrelated to those tasks. OAuth tokens are protected by access controls. Only the content needed for a given task is sent to the configured AI model provider. The privacy policy sets all of this out in full, including how to revoke access.
This website
This site is a static information page. It sets no cookies, runs no scripts, loads no fonts or assets from third parties, and collects no analytics. There are no forms on it and nothing to submit.
Read the privacy policy →