Privacy Policy

Last updated: 2026-05-26

1. Scope

Jarvis Workspace ("the application") is a private, single-user personal AI assistant operated by an individual developer. This Privacy Policy explains how the application handles personal data when accessed by the sole authorized user (help.me.up.95@gmail.com).

2. Data Accessed via Google APIs

When the operator authorizes the application via Google OAuth 2.0, the application may access the following Google Workspace data on the operator's behalf:

Google Calendar — events, calendars
Gmail — messages, labels, drafts, settings
Google Drive — files, folders
Google Docs / Sheets / Slides — document contents
Google Tasks — task lists and tasks
Google Forms — form structure and responses
Google Apps Script — projects, deployments, metrics
Google Chat — spaces, messages
Google Contacts (People API) — contact entries
Custom Search Engine — search results
OpenID — basic profile and email address

3. How Data is Used

Data accessed through Google APIs is used solely to perform the operator's requested tasks (for example, fetching today's calendar events, composing an email, summarizing a document). All processing occurs locally on the operator's own machine.

4. Data Storage

The application does not maintain a remote database. OAuth tokens are stored locally on the operator's machine in encrypted credential files. No personal data from Google services is retained beyond the duration of the immediate operation, except where the operator explicitly chooses to cache results locally for performance.

5. Data Sharing

No data is shared with third parties for advertising, analytics, or any commercial purpose. Data may be passed to the operator's chosen large language model provider (such as Anthropic Claude) only for the purpose of generating responses to the operator's queries, in accordance with that provider's own privacy policy.

6. Limited Use Compliance

The application's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The application:

does not transfer Google user data to third parties except as necessary to provide or improve the operator's own use
does not use Google user data for advertising
does not allow humans to read Google user data except with the operator's explicit consent or as required by law

7. Security

OAuth refresh tokens and access tokens are stored locally with filesystem-level access controls. HTTPS is used for all communication with Google APIs.

8. User Rights

The operator may revoke the application's access at any time via Google Account permissions. Revoking access immediately disables all further data access by the application.

9. Contact

For questions regarding this policy, contact: help.me.up.95@gmail.com