What DNS Autopilot reads in Gmail

DNS Autopilot asks for read-only Gmail access (https://www.googleapis.com/auth/gmail.readonly) only when you choose Connect Gmail. Google offers no narrower permission that can read attachments, so the limit is enforced in our code and described here.

What is searched

One fixed search. It also looks in Spam and Trash, because reports are often filed there.

has:attachment {subject:"report domain" subject:dmarc} {filename:gz filename:zip filename:xml} after:<date>

Nothing else is ever searched.

What is read

For each matching message: the sender, subject, date, and authentication headers (Authentication-Results and ARC), and any attachment ending in .xml, .gz, or .zip up to 10 MB. These headers let DNS Autopilot check that a report really came from the provider it names, including when a Google Group forwards it. Message bodies and all other headers are not requested, read, or stored. Attachments that are not DMARC reports are discarded.

What is stored

The parsed report (reporting organization, source IP addresses, message counts, SPF and DKIM results) and the original attachment, for 25 months. The Gmail message id is kept for 60 days so a report is never imported twice.

Limited Use

DNS Autopilot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Gmail data is used only to show you your reports. It is not used for advertising, not sold, and not read by people unless you ask us to or the law requires it.

Disconnect

Open Settings, then Gmail connections, and choose Disconnect. The stored token is deleted and syncing stops at once. You can also remove access at myaccount.google.com/permissions. Settings can also delete all stored data.

For Google Workspace administrators

If your organization limits third-party apps, mark DNS Autopilot as trusted in the Admin console: Security, then Access and data control, then API controls, then App access control. Choose Configure new app, search for DNS Autopilot, and set it to Trusted. Users can then connect Gmail without an administrator prompt.

Prefer not to grant any access? Use the report address instead. See also the privacy policy.