Privacy policy

1. Account information and purposes

With the owner’s account authorization, Jarvis can search and read Gmail messages and threads, summarize selected information, prepare email drafts, and save drafts after confirmation. Calendar access is read-only and supports reviewing events and answering questions about them. Google’s compose permission also covers sending, but the current Jarvis email features expose draft saving, not message sending.

Information used may include email subjects, senders, recipients, dates, message text, snippets, message references, and attachment names, types and sizes. The reviewed email features use attachment details rather than attachment contents. Calendar information may include event titles, dates, times, locations, descriptions and status.

Selected information also provides working context for related requests. Connecting an account does not by itself establish informed permission to share its information with a hosted AI service.

2. External services

Some requested processing takes place outside the owner’s device. Information is not universally anonymized before transfer.

• OpenAI: instructions, conversation context, selected email or calendar information, and draft text may be processed through its API for reasoning and wording. Submitted voice input is sent for transcription. OpenAI API data controls.
• ElevenLabs: text for spoken responses is sent for speech generation. The current configuration permits selected private email content to be read aloud. ElevenLabs privacy policy.
• Exa: public research queries and selected public URLs are sent for search and retrieval. Checks are intended to prevent private information from entering public research; they are not universal anonymization. Private email and calendar information must not be submitted as public research queries. Exa privacy policy.
• Google: receives account requests and drafts the owner confirms for saving. Public research may also request pages from the sites that host them.

OpenAI excludes API data from model training by default unless the customer opts in. Standard abuse-monitoring retention can last up to 30 days, with exceptions; other feature-specific retention may apply. Jarvis requests that generated Responses not be stored, but this does not eliminate all provider retention. The operator has confirmed that the API organization’s model-feedback sharing, evaluation and fine-tuning data sharing, and API input/output sharing are disabled. This is an account-settings report, not a promise of zero retention.

ElevenLabs offers a training opt-out for future submissions and publishes a Google Limited Use commitment. The operator observed the workspace’s “Improve the models for everyone” preference as disabled, with no pending change shown. The preference applies to future submissions; it does not erase previously processed content. Permitted service, security or operational retention may still apply. Opting out of training is distinct from zero retention. Exa’s public policy permits use of queries for model improvement, while separate business agreements can govern some customers; no special agreement has been confirmed here.

Account authorization and permission for external AI processing are distinct. Private information must not be transferred for hosted reasoning or optional email read-aloud before the owner receives a clear disclosure and affirmatively authorizes the provider and purpose. Authorizing one does not authorize the other. Consent does not permit prohibited general-model training.

3. Storage and retention

Conversation context, selected account information, draft working text and read-aloud text can remain in temporary local memory while the application runs. Closing a view or ending a session does not guarantee every copy is immediately erased. Limited continuity information is stored in the browser.

Public research reports and revisions are saved locally. Operational records can retain status, timing and identifiers. Connection credentials are stored separately on the owner’s device. No automatic long-term learning from connected Google accounts was identified in the reviewed account features.

There is no verified single retention period or automatic deletion schedule covering all local records and backups. Provider retention follows the applicable service terms and controls. No promise of zero retention or complete third-party erasure is made.

4. Choices and deletion

This public policy discloses data practices; publishing it does not record consent or activate application controls. The deployed Jarvis Privacy choices panel provides separate choices for OpenAI assistance, ElevenLabs private email read-aloud, and OpenAI microphone transcription. The OpenAI assistance choice covers all model-backed reasoning, including ordinary conversation, research, and assistance with authorized Gmail and Calendar information. Absent, declined, invalid or withdrawn choices prevent matching hosted dispatches. Choices can be reviewed and changed in that panel; allowing one purpose does not allow another or change Google account permissions. Withdrawal stops future matching dispatches, including pending work not yet sent. It does not recall requests already transmitted or erase provider-held copies. The owner can also contact the operator below to request withdrawal. This policy does not create an automated deletion control.

The owner chooses which accounts to connect and can revoke Google access through Google Account connections. Revocation prevents future authorized access; it does not delete information already processed.

A draft saved in Gmail remains there until managed or deleted in Gmail. Closing a local draft view does not delete the saved draft. Local reports, stored connection information, operational records and backups require separate handling. Provider-held copies are subject to provider deletion controls and retention obligations.

For privacy or deletion requests, contact datalakejarvis@gmail.com. Privacy and deletion requests are handled manually by the operator. Available deletion actions depend on the applicable local records, connected services, provider controls, and backup arrangements. Complete deletion from all systems cannot be guaranteed. The operator identifies relevant local records, saved Google drafts and applicable provider controls, then explains what can be removed and what must remain. Backup copies may require separate handling. There is no one-click erasure process. Do not include message contents or credentials in a privacy request.

5. Safeguards

Account access and draft saving are constrained by the owner’s permissions. External account and AI requests use HTTPS. Local access controls protect connection information. These measures do not establish end-to-end encryption or a universal guarantee about device and backup protection.

AI-generated interpretations can be inaccurate. Review drafts and important conclusions before acting on them.

6. Google information

Jarvis Personal Operations’ use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy and Google Workspace user data policy, including applicable Limited Use requirements.

Google information is limited to the disclosed user-facing purposes. It must not be sold, used for advertising, or used to train general-purpose AI models. This policy is not a claim of Google verification or endorsement.

7. This website and updates

This informational website contains no assistant connection, login, forms, analytics scripts, remote fonts or application-set cookies. It does not receive connected email or calendar information. Following an external link or emailing the contact address involves the selected external service.

This website is prepared for hosting on Cloudflare Pages Free. Hosting involves ordinary connection information, such as IP addresses, to deliver and protect the pages, under Cloudflare’s privacy policy.

Material changes to data practices require updated disclosures and any necessary consent before the changed processing begins. Questions can be directed to Jarvis Personal Operations at the contact address above.