Privacy Policy

Last updated: September 26, 2026

KISS Sorcar is an open-source AI agent framework (github.com/ksenxx/kiss_ai) that you install and run on your own computer. This policy explains what happens to your data when you use it, in particular when you connect a Google account through its Gmail, Google Calendar, Google Drive, Google Docs or Google Sheets connectors.

Who operates KISS Sorcar

KISS Sorcar is developed by Koushik Sen. There is no KISS Sorcar server or hosted service: the software runs entirely on your machine, and the developer does not receive, collect, store or have access to your data.

Google user data we access

When you connect a Google account, you grant the copy of KISS Sorcar on your machine an OAuth token for the scopes shown on Google's consent screen. For Gmail this is https://www.googleapis.com/auth/gmail.modify, which allows reading, composing, sending, labeling and moving email to the trash. It does not allow permanently deleting email. Other connectors request access to Calendar, Drive, Docs or Sheets.

How the data is used

Google data is accessed only to carry out tasks you give the agent, such as searching, summarizing, drafting or sending email.
To perform a task, the agent may send relevant content (for example the text of an email) to the large language model provider you have configured, such as Anthropic, OpenAI or Google. That transfer is governed by your agreement with that provider.
Google data is not sold, not used for advertising, and not used by the developer to train AI models.

Storage and security

OAuth tokens are stored locally on your computer, in a local credential vault or in a file readable only by your user account (~/.kiss/). Task history is kept in a local database on your machine. Nothing is uploaded to the developer.

Sharing

Your data is not shared with anyone except the model provider you choose, as described above, and Google itself when the agent calls Google APIs on your behalf.

Revoking access and deleting data

You can revoke KISS Sorcar's access at any time at myaccount.google.com/permissions. Deleting the ~/.kiss/ directory removes all locally stored tokens and task history.

Google API Services User Data Policy

KISS Sorcar's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Changes and contact

Changes to this policy are published on this page. Questions: kisssorcar@gmail.com, or open an issue on GitHub.