Scope of this policy. This policy covers this private assistant instance and its Gmail integration. It does not describe every installation of Paperclip or replace the policies of Google or other service providers.
1. Who operates the assistant
Peter Roselle operates Paperclip Assistant Gmail as a personal assistant for his own authorized workflows. It is not offered as a public sign-up service. Email correspondents do not become application users simply by exchanging messages with the connected account.
For privacy questions or requests, contact peterroselleassistant@gmail.com.
2. Information accessed
With the account owner’s authorization, the Gmail integration can access:
- Email message content and headers, including sender and recipient addresses, subjects, timestamps, thread information, labels and relevant attachments.
- Gmail account identifiers, profile information and settings available through the granted Gmail permissions.
- Message content, recipient details and attachments supplied or prepared for authorized outgoing correspondence.
- OAuth access and refresh tokens, granted-permission information, and operational records needed to maintain the connection and track processing or delivery.
The current Google OAuth permissions are https://www.googleapis.com/auth/gmail.readonly and https://www.googleapis.com/auth/gmail.send. The owner authorizes access through Google. Google account passwords are not requested or stored by this integration.
3. How information is used
Google user data is used to provide the assistant’s email-related features: review and summarize relevant messages, identify requested follow-up work, prepare correspondence and work products, send owner-authorized messages, and maintain continuity and delivery records. Operational information also supports troubleshooting, security and duplicate prevention.
Google user data is not sold, used for advertising, or used to build advertising profiles. The assistant’s permitted use of Google user data does not include training generalized or non-personalized AI or machine-learning models.
Use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
5. Storage, security and retention
Connection credentials are maintained in the operator’s protected credential store. Email-derived task records, source materials, work products and processing or delivery records may be retained in the operator’s private Paperclip environment and associated private storage or backups. Google also retains mailbox data under the account’s own settings and Google’s policies.
Access is limited through the assistant’s configured account and workflow controls. OAuth credentials must not be included in public pages or ordinary task content. Data is transmitted to Google over encrypted connections.
There is no single automatic deletion period for all assistant records. Information is retained while needed for the requested work, continuity, security, applicable recordkeeping requirements or recovery, until it is removed by the operator or through a fulfilled deletion request. Backup copies may remain until the applicable backup is rotated or deleted. No system can guarantee absolute security.
6. Your choices, revocation and deletion
The account owner can revoke the assistant’s Google authorization at any time through Google Account connections. Revocation stops future authorized access after Google processes it; it does not automatically delete information already retained in private task records, work products, backups or recipients’ mailboxes.
To request access to, correction of or deletion of information retained by the operator, email peterroselleassistant@gmail.com. State the nature of the request and enough context to locate the relevant records. Do not send passwords, authentication codes or other secrets. Identity or authority may need to be verified before a request is fulfilled.
Requests are assessed against applicable retention obligations and the rights of other people. Data that must be retained for a legitimate legal or security reason is restricted to that purpose. Deleting an assistant record does not delete the original Google mailbox message or retract a delivered email.
7. This information website
This public site contains application information and policies. It does not connect a visitor’s Google account, request Gmail permissions, or provide access to the private assistant. Its page code contains no advertising, analytics trackers, embedded third-party media or data-collection forms.
The hosting and network providers may process ordinary request information, such as IP addresses, browser details and access logs, to deliver and secure the site. If you choose an email contact link, the information you send is processed as correspondence.
8. Changes and contact
This policy may be updated when the assistant’s features or data practices change. The effective date above identifies the current version. Material new uses of Google data require updated disclosures and any consent required by Google’s policies before those uses begin.
Operator: Peter Roselle
Contact: peterroselleassistant@gmail.com