Privacy policy

Nova Assistant · last updated 16 September 2026

Nova Assistant is a personal tool with a single user: its owner. It is not offered to anyone else, and no third party's data is processed by it. This policy describes what the application does with Google account data.

What data is accessed

Only from Google accounts the owner has personally connected and consented to:

• Gmail — message content, headers, labels and attachments; the ability to apply labels and archive. For one dedicated account only, the ability to create drafts and send mail.
• Google Calendar — events and calendars, including creating, moving and deleting events.

Data is read only when the owner asks for something that requires it.

What it is used for

Solely to carry out the owner's own requests about his own mail and calendar — for example summarising an inbox, identifying newsletters, archiving old messages or scheduling an event. The data is not used for advertising, profiling, training models, or any purpose unrelated to the request being made.

Where it goes

The application runs on the owner's own computer. Two things leave that machine:

• Google's APIs — requests to read or modify the data above.
• Anthropic's Claude API — the assistant is built on Claude, so the content needed to answer a request (for example the sender, subject or body of messages being triaged) is sent to Anthropic to be processed, and is handled under Anthropic's own terms and privacy policy.

Nothing is sold, shared with advertisers, or sent to any other third party.

What is stored, and for how long

• OAuth tokens are stored on the owner's own machine, in a directory readable only by his user account, so the application can reconnect without a fresh sign-in. They remain until revoked or deleted.
• Message content is not kept in a database. It is read to answer a request and then discarded. Some requests write a message or an attachment to a temporary file on the same machine so that large content can be processed; those files are local and are removed when no longer needed.
• Conversation history with the assistant is retained locally, and may therefore contain quoted fragments of mail that was discussed.

Deleting data and revoking access

Access can be withdrawn at any time at myaccount.google.com/permissions, which immediately invalidates the stored tokens. Deleting the local ~/.google-mcp directory removes the stored credentials from the machine. Since no data is held on any server operated by this application, there is nothing further to request deletion of.

Limited Use

Nova Assistant's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

Questions about this policy: p-a@peeri.se.