Privacy Policy

Brian · Effective 11 September 2026

Brian is a private, single-user personal assistant application operated by Roman Obletsov ("the operator"). It is used by the operator for personal work and to administer the ARC-WIRE Google Workspace organization. This policy explains what data the application accesses and how it is handled.

1. Who this applies to

Brian is not offered to the public. It connects only to Google accounts and the Google Workspace organization controlled by the operator. In the course of Workspace administration, it may process directory and service data belonging to users in that organization.

2. What data is accessed

With the operator's explicit consent granted through Google's OAuth consent screen, Brian may access:

• Gmail — read, label, archive and send messages on the operator's behalf.
• Google Calendar — read, create and modify the operator's events.
• Google Drive, Docs and Sheets — read and write the operator's files.
• Google Contacts and Google Tasks — read and write the operator's contacts and task lists.
• Google Workspace administration — manage users, groups, organizational units, domains, resources and technical settings, and read administrative reports. Billing and payment data are excluded.

3. How the data is used

Data is used solely to carry out tasks the operator requests: finding information, drafting and sending messages, scheduling, organising files and keeping records and administering the operator's Workspace organization. It is not used for advertising, profiling, resale, or for training machine learning models.

4. Storage

Brian runs on a private server controlled by the operator. OAuth tokens are stored on that server with filesystem permissions restricted to the operator's account. Working notes and summaries derived from Google data are stored on the same server. Nothing is stored on third-party infrastructure other than the Google services the data came from and the language model providers described in section 5.

5. Sharing with third parties

Data is not sold, rented, or shared for advertising. Content the operator asks Brian to work with may be processed by the language-model providers selected by the operator, strictly to produce the requested result and under their data handling terms. No other disclosure takes place, except where required by law.

6. Retention and deletion

The operator can delete any stored data at any time by removing it from the server. Google access can be revoked at any time at myaccount.google.com/permissions, which immediately invalidates the stored tokens. On revocation, cached Google data is deleted.

7. Limited Use disclosure

Brian's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Security

Access to the server is restricted to key-based authentication. Credentials are never transmitted through chat channels or stored in logs. Successful logins to the server are monitored and reported to the operator.

9. Changes

Any change to this policy will be published on this page with an updated effective date.

10. Contact

Email: owner@arc-wire.com