Privacy policy
This policy explains how Persospace (“the app”, “we”) accesses, uses, stores and shares information, including data received from Google APIs. Persospace is a private, self-hosted personal assistant run by its owner (“the operator”) for personal use. It is not offered to the public; only the operator and people the operator personally invites can use it.
1. Who is responsible
The operator of Persospace is responsible for your data (the data controller). Contact: questions@persospace.com.
2. Information we access
Persospace only accesses the Google data you grant when you sign in and approve the permissions screen:
- Basic account information — your name, email address and profile picture, used to sign you in.
- Gmail — message content and metadata (senders, recipients, subjects, dates, labels), used to triage, label and summarise your email and to prepare drafts. Messages are sent only when you explicitly ask.
- Google Calendar — your calendars and events, used to look up your schedule and to create or update events when you ask.
- Google Drive — files you have access to, used to find, read and summarise documents when you ask.
You can grant only some of these permissions; features that need a permission you did not grant will not work. We do not request access beyond what these features need.
We also keep limited technical information needed to run the service securely, such as sign-in sessions and server logs (time, address and request details).
3. How we use information
Google user data is used only to provide and improve the features you use, as described above. Specifically, we:
- do not sell Google user data or any other personal data;
- do not use it for advertising, including retargeting, personalised or interest-based ads;
- do not use it to determine creditworthiness or for lending purposes;
- do not use it to develop, improve or train generalised artificial-intelligence or machine-learning models;
- do not allow humans to read it, except with your explicit consent for specific messages or files, when necessary for security purposes (such as investigating abuse), to comply with applicable law, or when the data has been aggregated and anonymised for internal operations.
4. Where data is processed
Persospace runs on servers owned and operated by the operator (a self-hosted “home lab” in the European Union), reached over a private, encrypted network. Data received from Google is processed and stored on these servers.
By default, the assistant’s language processing runs on AI models hosted on the operator’s own hardware. If a task is handled by a third-party AI model provider, only the content needed for that task is sent, through that provider’s API, and only to providers whose terms do not allow them to use API content to train their models.
5. Sharing and transfers
We do not share Google user data with third parties, except:
- AI model providers, as described in section 4, only to complete a task you requested;
- messaging services you choose to use with the assistant (for example Telegram): replies you ask for are delivered there and are subject to that service’s privacy policy;
- infrastructure providers needed to operate the service, such as Cloudflare for DNS and this website;
- when required by law, or to protect the security of the service and its users.
Any such transfer is limited to what is necessary and remains subject to the Limited Use requirements above.
6. Storage, retention and deletion
- Email, calendar and file data synced or cached by Persospace is kept only while the corresponding integration is enabled for your account.
- When you revoke access or ask us to delete your data, we delete stored Google user data within 30 days, except where the law requires us to keep it.
- Server logs are kept for a limited time for security and troubleshooting, normally no longer than 90 days.
You can revoke Persospace’s access at any time at myaccount.google.com/permissions, and request deletion by emailing questions@persospace.com.
7. Security
Access to the servers and the app is restricted to the operator and invited users. Connections are encrypted, OAuth credentials are kept out of source code and protected on the servers, and access is reviewed when the service changes. No system is perfectly secure, but we take reasonable measures to protect your data and will notify affected users of a breach where the law requires it.
8. Your rights
Depending on where you live (for example under the EU General Data Protection Regulation), you have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to withdraw consent at any time. To exercise these rights, email questions@persospace.com. You may also complain to your local data protection authority.
We process your data on the basis of your consent (given on Google’s permission screen) and to provide the features you ask for.
9. Children
Persospace is not intended for, and is not offered to, children under 16.
10. Changes to this policy
If this policy changes, the updated version will be posted on this page with a new effective date. Material changes affecting how Google user data is used will require your renewed consent.
11. Contact
Persospace — questions@persospace.com