Data practices

Privacy policy

How information is handled by Peter Roselle’s privately operated Paperclip Assistant Gmail.

Effective November 10, 2026

Scope of this policy. This policy covers this private assistant instance and its Gmail integration. It does not describe every installation of Paperclip or replace the policies of Google or other service providers.

1. Who operates the assistant

Peter Roselle operates Paperclip Assistant Gmail as a personal assistant for his own authorized workflows. It is not offered as a public sign-up service. Email correspondents do not become application users simply by exchanging messages with the connected account.

For privacy questions or requests, contact peterroselleassistant@gmail.com.

2. Information accessed

With the account owner’s authorization, the Gmail integration can access:

  • Email message content and headers, including sender and recipient addresses, subjects, timestamps, thread information, labels and relevant attachments.
  • Gmail account identifiers, profile information and settings available through the granted Gmail permissions.
  • Message content, recipient details and attachments supplied or prepared for authorized outgoing correspondence.
  • OAuth access and refresh tokens, granted-permission information, and operational records needed to maintain the connection and track processing or delivery.

The current Google OAuth permissions are https://www.googleapis.com/auth/gmail.readonly and https://www.googleapis.com/auth/gmail.send. The owner authorizes access through Google. Google account passwords are not requested or stored by this integration.

3. How information is used

Google user data is used to provide the assistant’s email-related features: review and summarize relevant messages, identify requested follow-up work, prepare correspondence and work products, send owner-authorized messages, and maintain continuity and delivery records. Operational information also supports troubleshooting, security and duplicate prevention.

Google user data is not sold, used for advertising, or used to build advertising profiles. The assistant’s permitted use of Google user data does not include training generalized or non-personalized AI or machine-learning models.

Use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

4. Processing and sharing

The assistant runs in an operator-controlled environment and can use third-party AI services configured by the operator to carry out requested work. Relevant email text, attachments or derived information may be transmitted to those services for that purpose. AI-assisted processing is not necessarily confined to the operator’s computer.

Transfers to AI, storage or infrastructure providers must be limited to delivering the requested assistant features, maintaining security or meeting applicable legal obligations, consistent with Google’s Limited Use requirements. Provider processing and retention depend on the service and account settings used. Providers must not be enabled for Google user data where their terms or settings permit uses inconsistent with this policy.

Authorized outgoing emails share their content and attachments with the intended recipients through Google’s email services. Relevant information may also be incorporated into the owner’s private task records and requested work products. The owner and specifically authorized support personnel may access information where needed for the requested workflow, troubleshooting or security, subject to applicable consent and access restrictions. Information may be disclosed where legally required.

5. Storage, security and retention

Connection credentials are maintained in the operator’s protected credential store. Email-derived task records, source materials, work products and processing or delivery records may be retained in the operator’s private Paperclip environment and associated private storage or backups. Google also retains mailbox data under the account’s own settings and Google’s policies.

Access is limited through the assistant’s configured account and workflow controls. OAuth credentials must not be included in public pages or ordinary task content. Data is transmitted to Google over encrypted connections.

There is no single automatic deletion period for all assistant records. Information is retained while needed for the requested work, continuity, security, applicable recordkeeping requirements or recovery, until it is removed by the operator or through a fulfilled deletion request. Backup copies may remain until the applicable backup is rotated or deleted. No system can guarantee absolute security.

6. Your choices, revocation and deletion

The account owner can revoke the assistant’s Google authorization at any time through Google Account connections. Revocation stops future authorized access after Google processes it; it does not automatically delete information already retained in private task records, work products, backups or recipients’ mailboxes.

To request access to, correction of or deletion of information retained by the operator, email peterroselleassistant@gmail.com. State the nature of the request and enough context to locate the relevant records. Do not send passwords, authentication codes or other secrets. Identity or authority may need to be verified before a request is fulfilled.

Requests are assessed against applicable retention obligations and the rights of other people. Data that must be retained for a legitimate legal or security reason is restricted to that purpose. Deleting an assistant record does not delete the original Google mailbox message or retract a delivered email.

7. This information website

This public site contains application information and policies. It does not connect a visitor’s Google account, request Gmail permissions, or provide access to the private assistant. Its page code contains no advertising, analytics trackers, embedded third-party media or data-collection forms.

The hosting and network providers may process ordinary request information, such as IP addresses, browser details and access logs, to deliver and secure the site. If you choose an email contact link, the information you send is processed as correspondence.

8. Changes and contact

This policy may be updated when the assistant’s features or data practices change. The effective date above identifies the current version. Material new uses of Google data require updated disclosures and any consent required by Google’s policies before those uses begin.

Operator: Peter Roselle
Contact: peterroselleassistant@gmail.com