Privacy policy
Small scope. Clear boundaries.
This policy explains how private Nhancloud family assistants use Google account data when their owner asks them to read a message, work with an attachment, or send an email.
Who and what this covers
The service consists of privately operated OpenClaw assistants for individual family members, including Chi and Tina. It is not offered to the public. Each assistant uses an independently stored account, workspace, authentication profile, and memory database.
Google data we access
The assistants request the Google OAuth scopes https://www.googleapis.com/auth/gmail.readonly and https://www.googleapis.com/auth/gmail.send. These let an assistant search for and read requested messages, download requested attachments, and send email from its connected account. They do not permit deleting, archiving, labeling, marking, organizing, or otherwise modifying mailbox messages or settings.
When an owner asks to check mail, the Gmail API returns matching message metadata, message bodies, and requested attachments. When an owner asks to send something, the recipient, subject, message body, and requested attachments are transmitted to the Gmail API. The connected account's address and encrypted OAuth token authorize those requests.
How data is used
- To find and read messages requested by the assistant's owner.
- To download and work with attachments requested by the owner.
- To send an email or attachment requested by the assistant's owner.
- To maintain the authenticated Gmail connection.
- To provide private conversation memory to that owner.
Google user data is not used for advertising, profiling, sale, or training a general AI model by the operator. Use of Google user data follows the Google API Services User Data Policy, including its Limited Use requirements.
Storage and sharing
OAuth credentials are encrypted at rest in private infrastructure. They are not placed in this public website. Requested messages may appear in conversation records and private local memory. Downloaded attachments are stored only in the connected assistant's isolated workspace so the assistant can perform the owner's requested work.
Data is shared only as needed with Google to retrieve or send the requested mail and with the configured AI model provider to process the owner's request. It is not sold or shared with data brokers, advertisers, or unrelated third parties. Email content is treated as untrusted input and cannot authorize new actions by itself.
Retention, deletion, and revocation
OAuth credentials are retained until the owner revokes access or the private assistant is removed. Access can be revoked at any time from the Google Account's third-party connections page. A deletion request can also be sent to the contact address below; the local OAuth credential, downloaded attachments, and associated private assistant records will be removed after verifying the request.
This website
This public information website has no user accounts, forms, uploads, advertising, analytics, or tracking cookies. It does not connect to the private assistant gateways and does not collect visitor data.
Contact
Questions, revocation assistance, or deletion requests can be sent to chiaiagent@gmail.com.