Privacy Policy

Last updated: 14 September 2026

Hal Vault is a private, single-user assistant operated by one individual on their own server. It has no users other than its operator, and no data belonging to any other person is collected or processed.

What data is accessed

When the operator authorises it, Hal Vault accesses the operator's own Google account data — specifically Gmail messages — using Google OAuth. Access is granted by the operator to their own account and can be revoked by them at any time at Google Account permissions.

How it is used

Google user data is used solely to carry out tasks the operator asks the assistant to perform, such as reading, summarising, drafting or sending their own mail. It is not used for advertising, profiling, analytics, model training, or any purpose beyond the operator's direct requests.

Storage and sharing

OAuth tokens are held in a credential vault on the operator's own server and are injected into requests at call time. Google user data is not sold, rented, or shared with third parties. Message content is processed transiently to fulfil a request and is not retained beyond what the operator's own conversation history contains.

Retention and deletion

Revoking access in Google Account permissions immediately ends all access. Stored tokens are deleted when the connection is removed from the vault.

Contact

This service is operated privately. Enquiries: jeffmatskin@gmail.com