Privacy Policy

Last updated: November 2, 2026.

Pandore is a desktop application for Mac and Windows, with a companion app for iPhone, published by Dorian Richard and Karine Cheng, Paris, France. This policy explains what data Pandore handles, where it is stored, and how the Google and Microsoft accounts you connect are used.

In short: your workspace lives on your own computer. Pandore has no server that stores your data, no user account of its own, and no advertising. Data from Google or Microsoft is used only to provide the features you see in the app, and is never sold, shared with advertisers, or used to train AI models.

1. Data stored on your device

Your clients, projects, tasks, calendar, notes, finances and conversations are stored in a local database on your computer. They are not sent to the authors of Pandore. The iPhone app connects directly to Pandore on your computer, over an encrypted connection you pair yourself; it does not go through a Pandore server.

You can export or delete this data at any time. Uninstalling Pandore and removing its application folder deletes it.

2. Google and Microsoft accounts

You can connect a Google account (Gmail, Google Calendar, Google Drive including Docs and Sheets files, Google Contacts) or a Microsoft account (Outlook mail, Outlook Calendar, OneDrive, Contacts). The connection happens on Google's or Microsoft's own sign-in page; Pandore never sees your password.

What Pandore accesses, and why

• Calendar: your events are copied into Pandore's local calendar so you see them next to your projects, and Pandore can add an event when you ask it to.
• Mail: Pandore reads messages when you ask it, or an AI agent you started, to search or summarize your mail, and can prepare a draft. An agent never sends mail by itself: a message leaves only when you review it in Pandore and click Send. If you connect an account, Pandore also reads the sender, subject and first lines of your recent unread messages to include them in your daily summary.
• Files and documents: Pandore searches and reads the files you ask about, so you can work on them from your projects.
• Contacts: Pandore looks up a contact's name, email address, phone number or company when you ask for it.

Where it is stored

The access token Google or Microsoft issues is stored in your operating system's secure storage (the macOS Keychain, or a file only your user account can read on Windows). Calendar events are stored in Pandore's local database. Mail, files and contacts are read on demand and are not kept by Pandore beyond the task you asked for.

AI agents

Pandore lets you run AI agents of your choice: Claude Code, Codex, Gemini CLI, or a model running locally on your computer. When you ask an agent to work with your mail, calendar, files or contacts, the content it needs is sent to that agent, under the account you configured with its provider, to carry out your request. The daily summary works the same way: the sender, subject and first lines of your recent unread messages are sent to the agent you chose so it can summarize them, and that agent has no tools during this step. If you use a local model, nothing leaves your computer. Apart from the daily summary, Pandore does not send Google or Microsoft data to any agent unless you ask for it.

Google API Services User Data Policy

Pandore's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is:

• used only to provide or improve the user-facing features described above;
• never transferred to others, except as needed to provide those features at your request, to comply with the law, or as part of a merger or acquisition with your consent;
• never used for advertising, never sold, and never used to train or improve generalized AI or machine-learning models;
• never read by humans, unless you give your explicit consent for specific messages (for example when you ask for support), when it is necessary for security purposes, or to comply with the law.

Disconnecting

In Pandore, open Configuration, then Connections, and click Disconnect: the access is revoked and the imported events are removed from Pandore. You can also remove Pandore's access from your Google account permissions or your Microsoft account permissions.

3. Other connections you choose

Other tools you connect yourself (for example a messaging webhook, a calendar subscription or an MCP server) are contacted directly from your computer, with the settings you entered, only to provide the feature you configured.

4. Updates and this website

Pandore checks getpandore.com for new versions. Like any web request, this reveals your IP address to our hosting provider, Vercel. The website uses Vercel Web Analytics to count visits and download clicks, without cookies and without identifying you.

Once a day, Pandore also tells our server its version number and the type of computer (Mac or Windows), and whether this is its first signal of the month or ever, so that we know how many installations are in use. No identifier is sent, your IP address is neither read nor kept, and only daily totals are stored: no installation or person can be recognized from one day to the next. You can turn this off in Configuration, under Pandore and its updates.

5. Security

Connections to Google, Microsoft and the iPhone app are encrypted. Away from home, the iPhone reaches your computer through a relay run by Pandore on Cloudflare. The connection is encrypted end to end between the two devices: the relay passes encrypted data it cannot read, stores nothing and keeps no logs. Like any network service, it sees the IP addresses of the devices while they are connected. When an agent finishes or needs you while the iPhone app is closed, your computer asks this relay to have Apple's push service alert your iPhone. The relay receives the iPhone's push address and the kind of event, passes them on to Apple and keeps neither: the alert is a generic sentence, with nothing from your projects or messages in it, and the iPhone then fetches the details directly from your computer. Tokens are kept in your system's secure storage, and Pandore only sends a Google token to Google's servers and a Microsoft token to Microsoft's servers.

6. Children

Pandore is a professional tool and is not intended for children under 16.

7. Your rights

Because your data stays on your device, you control it directly. If you are in the European Union, you have the rights granted by the GDPR; for any question or request, contact us and we will answer within 30 days.

8. Changes

If this policy changes, the new version will be published on this page with its date.

9. Contact

Dorian Richard, Paris, France. Email: dorich12740@gmail.com.