Политика конфиденциальности приложения assist

assist is a personal AI assistant for work commitments. It finds who promised what to whom and by when in its owner's email and chats, and reminds the owner in Telegram. The app has a single user, its owner: there is no sign-up and there are no other users. The app is developed by BBTRD (bbtrd.ru). App home page: assist.

2.1. Google user data. Through Google OAuth assist gets read-only access to the owner's Gmail (scope https://www.googleapis.com/auth/gmail.readonly). It uses incoming and sent messages: message text, sender, recipients, subject, date, message and thread identifiers, attachment file names. Attachments themselves are not downloaded. On connection, messages from the last 14 days are loaded, after that only new ones. Messages in the Gmail Promotions and Social categories are skipped without processing.

2.2. assist cannot send, modify, label or delete email. It does not request access to other Google services or to anyone else's account.

2.3. Other owner channels. Under the same principles (masking, retention limits, nothing sent to the owner's contacts) assist processes: the owner's work mailbox at bbtrd.ru (read-only); messages in work Telegram chats the owner has explicitly allowed it to read (read-only, without permission to reply); tasks and messages the owner writes or forwards to the bot. Voice notes from the owner to the bot are planned and will be handled under the same principles.

2.4. Emails and messages contain data of people who correspond with the owner: names, addresses, phone numbers, text. assist uses it only for the purposes in section 3.

Only to help the owner keep track of commitments:

• to find commitments in email (who, to whom, what, by when), messages that fulfil them, and notifications that require action;
• to keep a list of commitments and send the owner a digest and commitment cards in a private Telegram chat with the bot;
• to prepare draft reminders to the owner's contacts. Only the owner sees the drafts: assist sends nothing by email or to chats.

Google user data is not sold, not used for advertising and not used to train generalized AI or ML models. As part of operating assist, no one except the owner reads it.

assist shares data only with these services and only to operate:

• Anthropic (Claude models), the primary AI provider. Receives the masked text of an email or message (section 5) to extract commitments and prepare drafts.
• Yandex AI Studio, the fallback AI provider. Receives the same as Anthropic, and only if the owner switches the app to it in the settings. One provider works at a time. For the fallback provider, opting out of request logging and of the use of requests for model training is enabled.
• A hosting provider in Russia. The main assist server with the database is rented by the owner from a hosting provider in Russia.
• Webdock, the hosting provider. Data that is not personal data may be processed on its server (VPS) in Denmark (EU) (section 6.1).
• Telegram. The owner receives digests, commitment cards and drafts from the Telegram bot in a private chat.

Before any text is sent to an AI model, email addresses, phone numbers, messenger links, names of people and names of companies are replaced with placeholders such as <EMAIL_1>, <PHONE_1>, <PERSON_1>, <ORG_1>. The same name gets the same placeholder within a message, so the model can tell who promised what to whom without knowing who they are. The mapping between placeholders and real values is stored only on the server in Russia; after the model responds, placeholders are replaced back there. Quoted earlier messages and signatures are removed before processing.

Detection of names and company names is automatic and not absolutely guaranteed: individual values may remain unmasked in the text.

6.1. Location. The assist database is located in the territory of the Russian Federation. Personal data is stored and processed on a server in Russia, except for delivery to the owner via Telegram (Telegram's servers are outside Russia) and the cases in section 5 where individual values remained unmasked. Other data, including the masked text sent to the AI provider, may be processed on a server in Denmark (EU) and on the servers of the AI provider (section 4).

6.2. Emails and messages that created, changed or closed a commitment, and notifications that require action: the text is kept while the related commitment is open, but no longer than 90 days after receipt.

6.3. All other emails and messages: the full text is erased right after classification; only a one- or two-line gist is kept, and it is erased after 10 days.

6.4. Commitments themselves (who, to whom, what and by when, with a short source quote of up to 200 characters), message identifiers, the contacts directory (name, organization, email addresses, phone numbers) and draft reminders are kept longer than the text, until the owner deletes them: they are needed for the commitment list and to prevent duplicates.

6.5. Backups. Daily database backups are provided for: they are encrypted with separate keys and stored in external storage in Russia, not on the same server. Backups are kept for a limited time and deleted when their retention period ends.

6.6. Security. Gmail access is read-only. Tokens and keys are stored on the server in a restricted configuration file and are not in the code. assist runs in a separate environment under a separate account and accepts no incoming connections from the internet. The text of emails and messages is not written to application logs, only identifiers. The bot responds only to the owner.

Data is not sold and not shared with anyone except the processors in section 4, and only to operate assist. No advertising or advertising profiles are used.

assist's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

assist works with the text of emails and messages. It does not generate, edit or distribute images, video or any intimate imagery; email attachments are not downloaded. assist does not use Google APIs to create AI-generated non-consensual intimate imagery (NCII) or for any other purpose that violates the Google APIs Terms of Service.

You can revoke assist's access to a Google account at any time at https://myaccount.google.com/permissions. After that assist can no longer read email. Data already stored is deleted on the schedule in section 6, or immediately on request to ac@bbtrd.ru: all data stored by assist in the database is then deleted. From backups, data disappears when their retention period ends.

Questions about the app and data: ac@bbtrd.ru. More about the problem assist solves (in Russian): case study.