Privacy Policy
This policy describes how the AVREN personal assistant accesses, uses, stores and shares Google user data when an account owner authorizes its Google Workspace integration.
Data accessed and purpose
Depending on the permissions granted, the integration can access Gmail messages, metadata, labels and drafts; calendar events; Drive files and their contents; documents and spreadsheets; and contact details. It uses this information to perform requested tasks, such as reading or composing email, managing events, finding or editing files, and looking up contacts. Access is limited by the Google permissions granted to the integration.
Storage and processing
The assistant runs on an owner-controlled virtual private server. OAuth credentials and access tokens are stored on that server. Retrieved data and task results may also be stored in conversation history, logs or files on that server. Google receives requests and data needed to provide the APIs.
When Google data is used in a task, relevant content may be included in the assistant's conversation context and transmitted to its configured AI service to process the request. The current configuration uses OpenRouter, which may route requests to a model provider. Their handling and retention are governed by their applicable terms and settings.
Sharing and Google data rules
Data is shared with Google to access Google services and may be shared with the AI service and its model provider to perform requested tasks. The hosting provider and other configured service providers may process data as part of operating the server and services. AVREN's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Retention, revocation and deletion
Credentials remain on the server until removed or replaced. Conversation records, logs and downloaded files may persist after a task finishes and need to be deleted separately; deleting credentials does not automatically delete those records or any copies held by service providers. Retention by external providers depends on their terms and settings.
The account owner can revoke access at Google Account connections. The owner can also request deletion of AVREN-held data by contacting avren645@gmail.com; deletion from third-party services is subject to their processes.
Contact and changes
Questions about this policy or Google user data can be sent to avren645@gmail.com. This policy may be updated as the integration or its data practices change.