Data practices

Privacy notice

Jarvis is an owner-operated personal assistant. This notice describes its authorized use of the owner's connected data. No public user registration is provided.

Data accessed

With the owner's Google consent, Jarvis may access email messages and metadata, calendar events, Drive files, Docs, Sheets and contact information. The current Google authorization also permits sending or modifying email and creating or changing calendar events and files. Authorization alone is not an instruction to perform those actions.

Purpose and processing

Data is used for tasks requested by the owner: retrieving information, summarizing, planning and preparing or carrying out explicitly instructed actions. Relevant data and conversation context may be sent to the configured AI model provider, currently OpenAI, for inference. Connected tool providers receive the requests necessary for the selected task. Their own service terms and privacy notices also apply.

Storage and security

OAuth credentials and working records are stored on the owner's computer and, when configured, the owner's DigitalOcean server. Credentials are kept outside the public website with restricted filesystem permissions. Conversations, tool results and selected knowledge records may be retained for continuity; this application does not currently provide an automatic retention deadline. Public website visitors cannot access these records.

Limited use

Jarvis does not sell Google user data or use it for advertising. The operator does not use Google user data to train generalized AI models. Jarvis's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Control and deletion

The owner can revoke Google access in Google Account connections, disconnect other integrations, and delete local or server-side credentials, conversation history and knowledge records. Revoking access stops future authorized retrieval but does not automatically erase existing records or provider-side retention. Provider retention and deletion controls apply separately.

Contact

Questions about this private application may be sent to hello@forestandfriendsstudio.com. No tracking or advertising scripts are included on these public information pages.