SASHMO / PRIVACY
Privacy policy
Effective 17 October 2026
Sashmo is an open-source application that runs on your Windows PC and M5Stack CoreS3. This page describes the software distributed from the Sashmo repository. The 3D Palace website hosts this notice; it is not the Sashmo backend and does not receive your Google account data.
Information Sashmo uses
- Google Calendar, if you connect it: Sashmo requests read-only access to upcoming events on your primary calendar. It requests summary, start, end and visibility for a limited 48-hour window and keeps at most 20 events in memory. It does not request descriptions, locations, attendees or conference details. Private event titles are masked.
- Gmail, if you connect it: Sashmo requests metadata-only access. It reads the inbox unread count and, for up to ten recent messages, sender, subject, date and unread status. It does not read message bodies or snippets, search, send, delete or modify messages.
- Device and voice: The Windows service receives a short microphone recording when you tap to talk, plus battery, charging and connection status. It reads reported Codex usage from your local Codex session. Optional integrations use their own separate sign-ins.
Where information goes
Google access and refresh tokens are stored on your Windows PC using Windows data protection. Calendar events and Gmail metadata are cached on that PC for the dashboard and voice answers; they are not uploaded to this website. The CoreS3 receives event and unread counts, not event titles or message headers. Voice answers containing Google information use Windows speech on the PC.
If you enable OpenAI speech with your own API key, microphone audio is sent to OpenAI for transcription and non-Google replies may be sent for speech generation. You can leave that option off. Sashmo does not use the Google data it retrieved for advertising, model training or sale.
The CoreS3 and PC currently communicate over authenticated HTTP on a trusted private network. That link is not encrypted, so do not expose the Windows service to the internet or use it on an untrusted network.
Control and deletion
Calendar and Gmail connections are optional and separate. You can disconnect either in the Windows dashboard and revoke Sashmo access from your Google Account connections. Disconnecting removes the local grant; cached information is discarded as the service updates. You can also remove the local Sashmo configuration and account store from your PC. Sashmo does not keep a central user account or a cloud copy of your Google information.
Contact and changes
For privacy questions or deletion help, email cris@3d-palace.com. Material changes to this policy will be dated here before they apply to a new release.