Privacy Policy

1. Information we handle

• Account and profile information: your email address, sign-in records, password hash if you use a password, profile details, language and voice preferences, and permissions you configure.
• Conversations and personal assistance: messages, responses, voice transcripts, session information, reminders, agenda items, and memories you save or approve. Conversation history is stored to provide continuity and recall.
• Voice: microphone audio is processed for transcription or live conversation, and speech providers generate audio replies. The current web service stores conversation text and usage records; it does not maintain a separate archive of raw voice recordings. Providers may retain information under their service terms.
• Connected accounts: account identifiers, authorization credentials, selected email contents and metadata, sender exclusions, thread summaries, classifications, drafts, and calendar information described below. Other people may be identified in messages or events you choose to process.
• Service and security records: request times, IP addresses in server or network logs, browser/request information, errors, access audit records, and model usage, including tokens, durations, estimated costs, and language correction outcomes.

We use this information to operate and secure HeyRemi, authenticate users, provide requested assistance, remember preferences, synchronize authorized accounts, investigate problems, and measure service usage and cost.

2. Gmail and Google Calendar

Gmail: when you connect Gmail, HeyRemi uses authorized read access to retrieve message identifiers, senders, recipients, subjects, dates, thread information, and message text. It stores imported copies to show your email, support search and recall, and, when email AI is enabled, classify messages, summarize threads, identify topics, and propose reminders, agenda items, or replies. Sender exclusions and import controls limit future imports.

Sending is a separate permission. When authorized and available, HeyRemi sends a reply only after you explicitly confirm it. Deleting a copy in HeyRemi does not delete the original email from Gmail. HeyRemi does not request permission to permanently delete your Gmail messages.

Google Calendar: when you connect Calendar, HeyRemi reads the calendar list so you can select calendars. It stores selected event details, including titles, descriptions, locations, dates, times, and recurring or all-day information, for your schedule and private assistance. Synchronization uses a bounded date window. Optional event-write authorization enables creating or updating events you review and explicitly confirm; granting that permission does not itself change an event.

Google authorization credentials are stored encrypted on our server and used to maintain the connection. Gmail and Calendar connections use separate authorization records. You may disconnect a feature in HeyRemi or revoke the app's permission in your Google Account connections. Revoking the Google app's grant may affect both integrations.

Google API Limited Use

HeyRemi's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

We use Google data only for the user-facing features you authorize. We do not sell it, use it for advertising or credit decisions, or use it to train or improve generalized AI models. Transfers are limited to consented feature delivery, necessary security or legal purposes, or a business transfer with your prior explicit consent. Human access is limited to your specific affirmative permission, necessary security or legal purposes, or legally permitted internal use of aggregated information.

3. AI providers and other sharing

HeyRemi uses external AI services to generate responses, transcribe and generate speech, and analyze information for requested assistance. Depending on the configured feature and model, these services may be provided by OpenAI, Anthropic, or Google. Relevant prompts, conversation context, audio, and connected email or calendar content may be transmitted for that processing. Local search embeddings also help retrieve relevant saved information.

Email AI is controlled per mailbox. Private assistant requests can use relevant personal context, including connected information; ordinary companion conversations use a separate context. Turning off automatic email AI does not prevent processing information you later explicitly request through private assistance or an authorized external app. We do not use your Google data to train generalized models, and this restriction also applies when selecting providers to process that data.

We use hosting, delivery, and infrastructure providers, including Amazon Web Services, to deliver the site, sign-in emails, and other service functions. Yahoo connections use an encrypted app password to retrieve authorized email. These providers process information needed for their part of the service. Third-party services have their own privacy terms and may process information in countries other than yours.

Family and shared access: information shared through a profile is governed by that profile's permissions. Connected email, calendar, and private assistant information are restricted to owner-authorized access. Consider who can use your account, profile, or device before entering sensitive information.

MCP access: tokens you create can allow external apps to read the resources and content permitted by the token's scopes. Those apps may send retrieved information to their own AI providers or retain it under their policies. A separately enabled Calendar write permission allows that app to prepare events or changes and apply them after your explicit review and approval. Existing read tokens do not acquire write permission automatically. Only share a token with an app you trust to follow the review requirement; you can revoke tokens in MCP Access. Revocation stops future access but does not retrieve copies already obtained by another app.

We do not sell personal information or share it for targeted advertising. We may disclose information where necessary to meet a legal obligation, respond to a lawful request, or protect users and service security. A business reorganization may involve information subject to this policy; Google data remains subject to the additional restrictions above.

4. Retention, deletion, and your choices

We retain account and saved assistance information while needed to provide your service, unless you delete it or request removal. There is no universal automatic expiry for saved conversations, memories, or imported email copies. Calendar snapshots are refreshed within the supported sync window. Security, usage, and transaction records may be retained separately when needed for security, accounting, dispute resolution, or legal obligations.

• Manage memories and reminders, delete imported email copies, or stop tracking a sender using the corresponding HeyRemi controls.
• Deleting an email copy removes that copy from HeyRemi. Minimal identifiers may remain to prevent reimport. Previously created reminders, drafts, or other saved derived items may need to be removed separately.
• Disconnecting an account stops future access; it is not the same as deleting your HeyRemi account or all previously saved information. Calendar disconnection clears cached event details. Review imported email copies and saved derived items separately.
• Disable microphone access in your browser, change voice response preferences, or revoke MCP tokens.
• Request access, correction, a copy, or deletion of your personal information, including account closure, at contact@tao-corp.com. These account-level requests are currently handled through support. We may need to verify ownership before acting.

Deletion from active systems may not immediately remove information from backups or third-party systems. Any retained backup or legally required record remains protected and is not used to restore deleted information for ordinary assistance. We will explain applicable limitations when responding to a request. Depending on your location, you may also have rights to restrict or object to processing, withdraw consent, or complain to a privacy authority. Mandatory rights under applicable law remain available.

5. Browser storage and security

HeyRemi uses browser storage and connection cookies for sign-in, session continuity, authorization flows, and preferences. Signing out removes the local sign-in token. The site may request fonts from Google Fonts, which receives network information such as your IP address when the browser makes that request. We do not operate advertising trackers.

We use HTTPS, access controls, password hashing, and encryption for stored connected-account credentials. These measures do not make the service end-to-end encrypted: the backend and selected processing providers need access to content to provide assistance. No system can guarantee absolute security. Keep your sign-in links, device access, and MCP tokens private.

6. Children and policy changes

HeyRemi is intended for adults, including older adults and adult family members. It is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has provided information.

We may update this policy as the service changes and will update the effective date. Material changes will be communicated through the service or an appropriate contact channel. We will seek additional consent before using connected Google data for a new purpose where required.

7. Contact us

For privacy questions or data requests: contact@tao-corp.com.