Privacy policy

This policy describes how Mike Cooper's private R2D2 Assistant uses information from authorized Google accounts.

What the integration accesses

Each owner account is authorized separately through Google OAuth. The integration requests read-only Gmail, Calendar and Drive access, plus the identity information needed to verify that the intended account was connected.

It can retrieve messages and threads, calendar events, Drive file metadata and selected document or transcript exports. Its Google tools have no mail-send, event-edit, file-edit or sharing-change permissions.

How the information is used

Google data is used to answer the owner's requests and maintain the owner's personal knowledge archive. Imported text can support linked notes about projects, people, decisions and commitments. Original sources remain available for review.

Use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. The integration does not sell Google data, use it for advertising or build generalized AI training datasets from it.

Storage and copies

Access and refresh tokens are stored in owner-only credential files on the private Ubuntu host. The Google tools do not return credentials in their results, and routine knowledge backups exclude credential stores.

Selected imports preserve the original text, source link, account, modification date, retrieval date and content hash. Imported sources, notes and conversations can be included in private local backups. If the owner enables a private viewer on another device, the selected Markdown vault is also copied there. Large recording videos can remain in Drive.

AI providers and messaging services

Relevant retrieved content may be sent to the owner's chosen cloud AI provider to answer a request, under the owner's separate provider account settings. When a messaging interface such as Telegram is enabled, messages and answers also pass through that service.

This public information site is hosted by Cloudflare, which processes routine connection metadata to deliver it. The site has no access to Google credentials or the private knowledge archive, and includes no analytics scripts, sign-in forms or tracking cookies.

Retention, revocation and deletion

The owner can revoke permission in Google Account's third-party connections settings. Revocation stops new authorized retrieval; it does not erase sources previously imported.

The owner controls deletion of local source files, notes, conversations, viewer copies and backups. Imported copies have no automatic expiry in the current version. Backups may retain older copies until the owner removes those backups.

Contact and changes

This is a personal tool with no public signup. Privacy questions or requests can be sent to mike@klarefi.com. If the tool's data practices change, this policy and its effective date will be updated.