CLAWPI ASSISTANT

Privacy policy

Last updated: 10 November 2026

ClawPi Assistant is operated by Isaac Ho for personal use. This policy describes how its Google integration handles the owner’s information after authorization.

Information accessed and its purpose

The application uses the connected Google account’s email address to select the authorized account. Gmail read-only access allows it to search and read messages and related metadata, such as subjects, senders, recipients, dates, labels, and message or thread identifiers. This supports searches, summaries, and answers requested by the owner. It does not authorize sending, changing, or deleting Gmail messages.

Calendar access allows the application to read event information and create or update events. The assistant must describe a proposed Calendar change and obtain the owner’s confirmation before making it.

Processing and sharing

Information needed to answer a request may be sent to OpenAI or, when the fallback is used, Anthropic. Answers delivered through Telegram are also processed by Telegram. These services apply their own retention and account data controls. The owner can instead view responses through the private dashboard.

Google data is used to provide the owner’s requested assistant features. It is not sold, supplied to advertisers, or used by this application to train general-purpose AI models. ClawPi Assistant follows the Google API Services User Data Policy, including its Limited Use requirements.

Storage and security

OAuth credentials and login state are stored on the owner’s device with restricted filesystem access. Google login tokens use the CLI’s encrypted file keyring. Its unlock secret is kept in a separate file with restricted access for the assistant service.

Conversation history can contain email excerpts, summaries, and calendar information. This history is stored on the owner’s device and may also be retained by the services used to process or deliver the request. Owner-created backups may contain saved history or credentials. There is no promised fixed automatic deletion period.

The public information website does not display email messages, calendar events, or assistant conversations. It is hosted on Cloudflare, which may process request metadata to deliver and secure the website. These pages include no analytics scripts, contact forms, or advertising trackers.

Revoking access and deleting saved information

The owner can revoke Google access through Google Account connections. Revocation stops future authorized access, but does not automatically erase existing conversation history, backups, or copies retained by processing and messaging services. The owner can remove local credentials and history through device administration and manage provider-held data through the relevant service’s controls.

Contact and changes

Questions or requests about this application can be sent to isaac@astrawebservicespg.com. This policy will be updated before the application begins using Google data for a new purpose.