Privacy policy

Effective date: October 27, 2026

In brief: Kole Personal Assistant is a private, owner-operated assistant. Google account access supports the owner's requested productivity tasks. Relevant information may be processed by configured AI services. This informational website does not collect Google passwords or provide public account registration.

1. Application and operator

This policy covers Kole Personal Assistant, also called P.A.M., its Google Workspace integration, and this informational website. The application is operated by Kole for personal use through an OpenClaw environment. Contact: hesserkolten2005@gmail.com.

2. Information accessed

Depending on the permissions granted and the task, the application may access:

Account identity: Google email address and basic account identifiers used to identify the connected account.
Gmail: message content, attachments, headers, labels, and mailbox settings within the authorized scopes.
Calendar: calendars, events, participants, and associated scheduling details.
Drive, Docs, Sheets, and Slides: file metadata, document contents, spreadsheet data, presentations, and related file information.
Contacts: contact names, email addresses, phone numbers, and other authorized contact information.
Authorization and task records: OAuth tokens, user instructions, generated outputs, and relevant operational or conversation records.

3. How information is used

Information is used to carry out requested personal productivity tasks, such as summarizing correspondence, preparing replies, finding files, organizing schedules, and creating or editing documents. Authorized permissions can include changes to account data. Technical permission does not itself constitute an instruction to send messages, share files, or perform other actions.

4. Processing and sharing

The assistant may send relevant instructions and Google-derived information to configured AI inference providers to generate responses and complete tasks. Which provider processes a task depends on the active model and routing settings. Provider retention and processing terms depend on the selected service, account, and settings; this policy does not promise zero retention by every provider.

Information may also be processed by the hosting and infrastructure services supporting the assistant, or sent to recipients and services when the owner requests it. Google account data is not sold, used for advertising, or provided to data brokers. The application does not use Google user data to develop, improve, or train generalized AI or machine-learning models. Any disclosure required by law or necessary for security must be limited to the applicable purpose.

Kole Personal Assistant's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Storage and security

OAuth tokens and client secrets are stored in an encrypted local keyring on the assistant host, with the keyring password managed separately through OpenClaw secret storage. Google passwords are not collected by the application. Relevant task information can be retained in conversation history, assistant memory, working files, logs, or backups. Access is subject to the host and assistant access controls. No system can guarantee absolute security.

6. Retention, revocation, and deletion

Authorization tokens are retained while the integration remains connected. Task records and saved files may persist until removed by the operator; there is no fixed automatic deletion period for all records.

The owner can revoke access in Google Account connections. Revocation stops future authorized access but does not automatically remove existing local copies, task records, or backups. To request disconnection and deletion of stored account-related data, contact the operator. Relevant active records can be removed, while residual backup copies may remain until those backups are rotated or deleted. Deletion from this assistant does not itself delete original Gmail messages or Drive documents.

7. This website

These static pages contain no application analytics scripts, advertising, forms, or application-set cookies. The hosting provider may process ordinary request metadata, such as IP addresses, request times, browser information, and security events, to deliver and protect the website. If hosted on Cloudflare, its processing is described in the Cloudflare Privacy Policy.

8. Changes and contact

This policy will be updated if the application's data practices change. The effective date above identifies the current version. For questions or requests, email hesserkolten2005@gmail.com.