Privacy Policy

AskCalvin ("we", "us", the Service) is an executive assistant that integrates with your Google account and your favorite messaging app. This policy explains what data we collect, how we use it, and what rights you have.

1. Who runs AskCalvin

AskCalvin is operated by Barak Landau. Contact: hello@askcalvin.ai.

2. Data we collect

When you connect AskCalvin, we store and process:

• Your phone number and display name, so we can route messages to you on the app you already use.
• Your Google account email, issued by Google after you authorize the Service.
• OAuth access and refresh tokens issued by Google, used only to call Google APIs on your behalf. How these are secured is described in the Security section below.
• Your messages to and from AskCalvin, stored as conversation history so the assistant remembers what you told it.
• Voice notes you send, transcribed by OpenAI Whisper, then stored as text. The original audio is deleted immediately after transcription.
• Google Calendar data (events, attendees, times) that you explicitly grant access to. Used to build briefings, reminders, and change notifications. Never shared.
• Google Contacts (names, phone numbers, email addresses) that you authorize. Used to resolve who you mean when you say things like "text Sarah" and to add context to reminders. Never shared.
• Google Docs that you explicitly direct the assistant to read, create, or append to, such as a call notes document.
• Google Sheets that you explicitly direct the assistant to read, update, or append to, such as a tracking spreadsheet.
• Gmail metadata and content (only when you opt in to the Gmail integration): subject, sender, snippet, and message body of emails, used for inbox digests, urgent alerts, and to send or reply to email when you ask. Calvin can also apply labels and move processed messages (for example, filing Amazon order confirmations) at your request.
• Long term memory that you ask the assistant to remember (preferences, people, context). Stored indefinitely until you delete it.

3. How we use the data

We use your data solely to deliver the AI executive assistant features you request over WhatsApp: building your briefings and reminders, triaging and drafting email, taking and filing notes, working with the Docs and Sheets you point us to, and remembering the preferences and people you tell us about. We do not sell it, rent it, show it to advertisers, or use it to train any public or generalized AI model.

4. SMS and Mobile Information

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All categories of personal information exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

For full details of our SMS program, including message frequency, STOP and HELP keyword instructions, and message and data rates, see our Terms of Service section on SMS Program Disclosures. To review the opt-in flow and program description, see our SMS page.

5. Google User Data

AskCalvin's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, Google user data is:

• Used only to provide features you have requested within AskCalvin.
• Never transferred to third parties except as necessary to provide or improve user facing features, comply with applicable law, or as part of a merger, acquisition, or sale of assets with user notice.
• Never used for advertising purposes, including retargeting, personalized, or interest based advertising.
• Never read by a human except with your explicit consent, to troubleshoot on your request, or where required by law.

6. Third party processors

We use the following vendors to operate the Service:

• Anthropic (Claude API): agent reasoning and briefings. Google user data may be sent to Anthropic to generate the responses you request, under commercial terms that prohibit training on that data.
• OpenAI (Whisper API): voice transcription only. Audio is deleted immediately after transcription.
• Supabase: storage (messages, memory, tokens).
• Meta WhatsApp Cloud API: message delivery on WhatsApp.
• Upstash QStash: reminder scheduling.
• Vercel: application hosting.
• Google (Calendar, Contacts, Docs, Sheets, Gmail APIs): your authorized Google data.

Each processor handles your data under their own terms and only as needed to deliver the Service.

7. Data retention and deletion

Your data is retained as long as your AskCalvin account is active. You can request deletion at any time by sending the message "delete my account" from your registered phone number. This starts a 7 day grace window during which you can undo the deletion by replying "UNDO". Once the grace window passes, a daily automated job (03:00 UTC) permanently and irreversibly deletes your account and all associated data: your messages, memory, Google OAuth tokens, notes, and tenant record.

You can also disconnect Google at any time from your Google Account permissions page. Revocation takes effect immediately. For any deletion question, contact hello@askcalvin.ai.

8. Security

All data is transmitted over encrypted connections (TLS). Gmail OAuth tokens are additionally encrypted at rest using AES-256-GCM. Other data, including your Google Calendar and Contacts OAuth tokens, is held in an access controlled database available only to the Service. We follow industry standard practices but cannot guarantee absolute security.

9. Changes to this policy

If we materially change how your data is used, we will notify you and update the date at the top of this page.

10. Contact

Questions or data requests: hello@askcalvin.ai.