Application data practices

Privacy policy

Effective November 1, 2026

Shoan Personal Assistant is a private personal tool operated by Shoan Raj. It is used by its owner, not offered as a public account-registration service. Questions and data requests can be sent to letterstoshoan@gmail.com.

Data accessed

With the owner’s OAuth authorization, the assistant can access Google Calendar account and calendar identifiers, event details (including titles, descriptions, times, locations, and attendees), availability, and event responses. Calendar permissions allow event management; the assistant’s exposed tools limit ordinary actions to reading and managing individual events.

A separately authorized Gmail read-only connection can access account profile details, labels, message identifiers, sender and recipient headers, subjects, dates, message bodies, and attachment metadata. The current Gmail integration does not download attachment files, send email, create drafts, delete messages, or change mailbox state.

The bot also receives the owner’s WhatsApp requests and maintains conversation and tool activity needed to answer them. OAuth access and refresh tokens are stored to keep the owner-authorized connections working.

Purpose and use

Google data is used to provide requested personal-assistant features: agendas, availability checks, event management, email searches, summaries, and deadline extraction. Relevant data may be included in subsequent conversation context. Calendar changes are made in response to owner instructions, not as an unrestricted background synchronization service.

Google data is not sold, used for advertising, or used by the operator to train or improve generalized AI or machine-learning models.

AI processing and service providers

Relevant message and event information, requests, and tool outputs may be sent to the configured Microsoft Azure-hosted AI service to interpret requests and generate answers. The private assistant runtime and conversation records operate on an AWS-hosted server. Responses may contain Google-derived information and are delivered through WhatsApp, which involves WhatsApp/Meta’s messaging infrastructure. These providers process information to deliver their respective services; their own service terms and privacy practices also apply.

GitHub Pages hosts this informational website and may process ordinary visitor connection data such as IP addresses and request logs. The website has no account login, advertising, analytics script, or connection to the private Google tokens. Google account contents are not published to this website or its public GitHub repository.

Storage, retention, and security

OAuth credentials and tokens are stored separately from source code in access-restricted files on the private bot server. Conversation history, tool activity, responses, and operational records may contain Google-derived data and persist on the private server. There is currently no fixed automatic deletion period for all conversation records; they remain until the operator removes them. Disconnecting an account does not automatically erase prior conversation history or information already delivered through WhatsApp.

Authenticated Google API and AI requests use encrypted HTTPS connections. The operator restricts access to the server and credentials. No system can guarantee absolute security. Provider-held logs, backups, and messages are subject to the respective provider’s retention and deletion controls.

Human access and disclosure

The owner can view their own requests, results, and data. Operator access is limited to owner-authorized support, security investigations, or compliance with applicable legal obligations. Google data is not shared with unrelated third parties. Necessary processing by the service providers described above is limited to operating the requested features.

Revocation and deletion

The owner can revoke the app’s access through Google Account third-party connections. To disconnect stored grants or request removal of bot-held data and conversation records, contact letterstoshoan@gmail.com. The operator handles removal manually; no instant or automatic deletion is promised. Revocation stops future authorized API access but does not remove original Gmail messages or Calendar events from Google, previously delivered WhatsApp messages, or provider-held records outside the operator’s control.

Google API Limited Use

Shoan Personal Assistant’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Policy changes

Changes will be published on this page with an updated effective date. Material new uses of Google data require an updated disclosure and any necessary owner authorization before they are introduced.