Privacy Policy

Clawdia — last updated 27 August 2026.

Who this covers

Clawdia is a self-hosted personal assistant with exactly one user: its operator, Tin Sučević ([email protected]). It is not offered to the public and has no other users. This policy describes how it handles the operator's own data.

What data is accessed

Clawdia accesses only the Google account of its operator, using scopes that operator granted:

• Gmail — to send reports to the operator's own address, and to read the operator's own mail when asked to summarise it.
• Drive and Sheets — to read and write the operator's own documents.
• Calendar — to read and create the operator's own events.
• YouTube analytics — to read performance statistics for channels the operator administers.

No other person's account is accessed, and no mechanism exists for anyone else to sign in.

How data is stored

• OAuth tokens are stored on the operator's own hardware — a private Raspberry Pi and a personal desktop — in files readable only by the operator's user account.
• Retrieved content (report figures, message text, calendar entries) stays on that same hardware.
• Nothing is stored on third-party servers by Clawdia itself.

How data is shared

It is not sold, rented, or shared with third parties. Data leaves the operator's machines in only two ways, both initiated by the operator:

• Emails and messages the operator asks Clawdia to send, to recipients the operator specifies.
• Requests to language-model providers used to process a request. Those providers act as processors and do not receive Google account credentials.

Retention and deletion

The operator can delete all stored data at any time by removing the credential and data files from the machines, and can revoke Clawdia's access to the Google account at any time at myaccount.google.com/permissions, which immediately invalidates its tokens.

Limited Use

Clawdia's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google APIs is used only to provide the functions described above for the operator, is not transferred to others except as required to provide those functions, and is not used for advertising, sold, or used to build profiles.

Contact

[email protected]