1. About AISR2
AISR2 Personal Assistant is a private, owner-operated application, not a service offered to the general public. This policy describes how it handles personal information and information obtained through the Google Gmail API.
2. Google data accessed
With the owner's explicit authorisation, AISR2 uses the Gmail API scope https://www.googleapis.com/auth/gmail.readonly. It permits reading Gmail data, not sending, modifying or deleting messages.
The connector can collect Gmail message IDs, thread IDs, dates, sender and recipient addresses, email subjects, labels, attachment-presence indicators, and up to 4,000 characters of plain-text message content. Gmail history identifiers are used for incremental collection. The current connector does not download attachment files.
3. Purpose of use
Information is collected to organise observations and, when separately enabled, to help the owner identify important developments, obligations and relevant follow-up. Initially, the direct Gmail integration stores historical observations only; Gmail AI judgements and Telegram notifications require separate activation.
Google user data is not sold or used for advertising, commercial profiling or training general-purpose artificial intelligence or machine-learning models.
4. Storage and external processors
Observation records and collection checkpoints are stored in a private Neon PostgreSQL database. The AISR2 runtime operates on Railway. During migration from the prior collector, Gmail observations may also pass through the owner's Google Sheets-based collection process before import into the same database.
If the owner enables AI-assisted email assessment, selected message content may be processed through OpenAI's API to generate private, owner-facing assessments. If the owner separately enables notifications, selected summaries may be delivered to the owner's Telegram account. These features are not automatically enabled by granting Gmail read-only access.
These providers supply application infrastructure or explicitly enabled functionality; message contents are not published on this information website.
5. Access, retention and deletion
AISR2 and its stored data are intended for the account owner's use. Records are retained until removed by the operator or under a subsequently documented retention policy; no fixed automatic deletion interval is presently promised.
The owner may revoke Google's API authorisation through their Google Account permissions. Revocation prevents further access using that authorisation but does not automatically delete previously stored observations. Stored records can be removed separately by the operator.
6. Google API policy
AISR2's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Use of Google user data is limited to the owner-facing features described in this policy.
7. Changes and contact
This notice will be updated if AISR2's access, processing services, retention practices or features materially change. For questions about AISR2's data practices, contact the operator at privacy@resistancecamp.com.