Agent Chat privacy

Agent Chat does not listen for Google Chat events or run autonomous replies. It validates a short-lived Google access token for each explicit MCP request and does not store employee refresh tokens or message history.

Google Chat remains the source of truth. Attachment bytes exist only for the duration of the requested upload or download.