Tesseract Labs Connector Privacy Policy
Effective 19 October 2026
Tesseract Labs Connector ("the service") is a personal assistant operated by an individual ("we", "the operator") for themselves and a small number of people they invite. This policy explains what data the service accesses when you connect an account, how it is used, where it goes, and how you remove it.
1. Data we access
The service accesses only the accounts you connect, and only through the permissions you grant on Google's consent screen.
- Email (Gmail). With "View your email messages and settings" the service can read message headers (sender, recipients, subject, date), plain-text message bodies, attachment names and labels. With "Send email on your behalf", which is requested only if you want the assistant to send for you, it can send messages that you have approved.
- Future integrations (calendar, contacts, files). These will be requested separately, read-only, and only if you choose to connect them. This policy will be updated before any of them is requested.
- Account identifier. Your email address, to tell your connected accounts apart.
We do not access attachment contents, passwords, or payment information. Messages that contain sign-in codes, password-reset or verification links, or credentials are automatically withheld. The assistant sees only that such a message arrived, from whom and when.
2. How we use it
Only to provide the features you use:
- answering your questions about your own messages (and later your calendar, contacts and files);
- preparing summaries and briefings for you;
- keeping a private index of the people you correspond with, so you can find and keep in touch with them;
- composing messages you ask for, and sending each one only after you have approved its full text.
We do not use your data for advertising, sell it, build profiles for anyone else, or let people read it except as described in section 4.
3. Storage and security
- Data from your accounts, and the summaries and index made from it, are stored on a computer the operator controls. They are not stored on a public server.
- Your Google sign-in tokens are held by a separate component on that computer. The assistant cannot read them.
- An encrypted backup is kept on the operator's private home storage.
- Access to the computer is restricted to the operator. The assistant's actions are logged and supervised.
4. Sharing and processors
We share your data only with:
- AI model providers (currently Anthropic, and models reached through OpenRouter, including routes that keep no data). They process excerpts of your data to produce answers and summaries for you, under terms or account settings that do not allow them to use the data to train their models.
- Authorities, where the law requires it.
No other third parties receive your data.
5. Google API Services: Limited Use
Tesseract Labs Connector's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, Google user data is used only to provide or improve user-facing features of the service. It is not transferred except as described above, used for advertising, or sold. It is not used to develop, improve or train generalized AI or machine-learning models. People read it only with your consent, for security, to comply with law, or when the data has been aggregated and anonymized.
6. Retention and deletion
- We keep data only while your account is connected and the data is needed for the features above.
- You can revoke the service's access at any time at myaccount.google.com/permissions. The service then stops accessing your account.
- To have your stored data and index deleted, write to purdy1agent1alpha@gmail.com. We delete it within 30 days, including from backups as they rotate.
7. Children
The service is not intended for anyone under 13 and does not knowingly process their data.
8. Changes
If this policy changes, we will update the date above. Before using data in a new way or requesting a new permission, we will tell connected users and ask for consent again.