Privacy Policy

Effective date: 6 September 2026.

Jarvis Personal Apps is operated by Abdulla AlJaziri for personal use.

Google sign-in data. Admin Console requests OpenID Connect email and basic profile permissions to verify Google identity. It retains the Google account identifier, email address, account-role information, and local sign-in sessions. Session records also contain sign-in times, IP address, and browser user agent.

Gmail data. The connector requests gmail.readonly. That permission permits reading email messages and settings. The current version retrieves the account email and Gmail labels. It stores the account email, OAuth access and refresh tokens, granted scopes, and token timestamps in its local PostgreSQL database. Message polling, message-content storage, and forwarding Gmail content to an AI provider are not implemented in this version.

Storage and access. Application records and credentials are stored on the owner's computer. Backend and database ports are bound to loopback. OAuth client configuration files are restricted to the operating-system user and excluded from version control. OAuth tokens are not separately encrypted within the local database. Access to the computer and its database must therefore remain limited to authorized users. This version is not offered as a public multi-user service.

Use and sharing. Google user data is used only for the described sign-in and connector features. It is not sold, used for advertising, or used to train generalized AI models. The current integrations exchange authentication and API requests with Google; they do not forward Google user data to an AI provider. Jarvis Personal Apps' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including Limited Use.

Retention and deletion. Local account and connector records remain until the owner removes them. Google access can be revoked in Google Account settings. Revocation stops future authorized access but does not itself delete local records. Contact akj308@gmail.com to request removal of local records.

Public website. Cloudflare hosts these information pages and processes technical request data, including IP addresses, to deliver and protect the website. This site has no sign-in form or mailbox connection. Fonts are served with the site; no application analytics or advertising scripts are installed.

Changes. These disclosures must be updated before changing how Google user data is accessed, stored, shared, or processed.