Privacy policy
Brimlo is a personal assistant operated by its owner for private use.
Data and use
With permission, Brimlo accesses Gmail messages, metadata and attachments, and Calendar event details when connected. It also processes requests, responses and authorization tokens. Google permissions apply to the connected mailbox or calendars. Brimlo does not receive the Google account password.
Data is used to answer requests, summarize information, support research and carry out authorized tasks. Sending email requires the owner's approval.
Processing and sharing
Relevant content may be processed by Google, Render for hosting, OpenAI for AI responses, and Telegram for conversations and approvals. Approved messages go to selected recipients. Information included in a research query is shared with the research service. These providers have their own privacy and retention practices.
Google data may be used only for the authorized functions described here, and must not be sold, used for advertising or used to train general-purpose AI models. Brimlo's use and transfer of Google data is subject to the Google API Services User Data Policy and Google Workspace API User Data and Developer Policy, including their Limited Use requirements.
Storage and retention
Brimlo retains connection credentials and relevant conversation and task records, which may contain message excerpts. The documented setup encrypts Google tokens in a keyring and restricts access to private state. The operator can access retained records for operation and support.
There is currently no fixed automatic deletion period for assistant records. They remain until removed by the operator or following a deletion request. Provider logs and backups may have separate retention periods.
Access and deletion
Revoke access through Google Account connections. Revoking access stops future access through that authorization; it does not delete previously retained information.
For questions or deletion requests, contact brimlolabs@gmail.com. Information retained by other providers or message recipients may need to be deleted separately.
This website
This site does not connect Google accounts or collect email content. It uses no application analytics or advertising scripts. The hosting service may process standard connection information and request logs. This policy will be updated when Brimlo's data practices change.