Data practices

Privacy policy

Effective and last updated: 27 October 2026

Saibot is a private personal assistant operated by Tobias Velvang. This policy describes the assistant’s use of Google account and Gmail data, and the separate public information website at tobvel.com. Saibot is operated for its owner’s personal use and does not offer public user accounts.

Data Saibot accesses

When the owner authorizes Google access, Saibot receives the account’s email address and an OAuth authorization. Depending on the permissions granted, it can access Gmail messages, message headers, senders and recipients, threads, labels, drafts and attachments. Access may include historical messages. The authorized Gmail capabilities support searching and reading mail, preparing and managing drafts, sending and replying, and, where granted, organizing mail through labels, archiving and moving messages to or from Trash.

Google authorization does not give Saibot the owner’s Google password. Gmail authorization is separate from permission to access other Google services.

How the data is used

Gmail data is used to carry out the owner’s email and personal-assistance tasks: finding relevant messages, understanding attachments, summarizing threads, preparing replies, sending requested messages and performing requested mailbox actions. Authorized background tasks may check for relevant messages. The assistant may retrieve more than one message when a task requires context.

AI processing and sharing

Selected email content, attachments, task instructions and conversation context may be sent to the AI provider configured for the assistant, including OpenAI, to perform the task. Those providers process the supplied information under their applicable service terms and privacy policies. Gmail messages sent by the assistant are delivered through Google to their intended recipients.

Saibot does not sell Google user data, use it for advertising, or use it to develop, train or improve generalized AI or machine-learning models. Google data is transferred only as necessary to provide the requested personal-assistance functionality, comply with applicable law or address security issues. The owner does not authorize AI providers to use Gmail data to train generalized models.

The owner can review the assistant’s task history and email results. Other people are not provided general access to the connected mailbox through this website. Saibot’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Storage, protection and retention

OAuth credentials are held in an encrypted credential store on the owner’s computer. Google API and AI-provider connections use encrypted transport. Relevant message copies, attachments, summaries, task histories and logs may be stored in the assistant’s local workspace and conversation state, and may be included in backups. They are retained while needed for the owner’s tasks or records, until the owner deletes them; there is currently no single automatic deletion period for these local records. Backup copies may persist until the corresponding backup is removed. AI-provider retention is governed separately by the provider and account settings.

The public information site does not contain Gmail messages, authorization credentials or a mailbox interface. No advertising trackers or analytics scripts are installed in these pages. The website’s hosting infrastructure may process ordinary network request information, such as IP address and user agent, to serve and secure the site.

Control, revocation and deletion

The owner can revoke Saibot’s authorization at any time in Google Account connections. Revocation stops future access through that grant but does not automatically delete previously saved local records, backups, provider records or messages already delivered to recipients. To delete local assistant data, the owner can remove the relevant workspace, histories and backups. Questions or deletion requests can be sent to tobiasvelvang@gmail.com.

Policy changes and contact

This page will be updated when Saibot’s Google-data practices materially change. The date above identifies the current version. Operator and privacy contact: Tobias Velvang, tobiasvelvang@gmail.com.