Privacy Policy
1. Who we are
Andres AI (the "Service") is a private, invitation-only AI assistant operated by Andres (the "Operator", "we"). The Operator is the data controller for personal data processed by the Service. Contact: ai@sley.dev.
The Service is not offered to the public. Access is granted individually by the Operator.
2. What data we process
- Telegram data: your Telegram user ID, name and username, and the messages, files and voice notes you send to the assistant in chats where it is active.
- Google account data, only if you connect a Google account (see section 3).
- Service data: notes, reminders and settings the assistant keeps so it can do its work, and technical logs (timestamps, errors).
3. Google user data
When you connect a Google account, you sign in on Google's own consent screen and choose which access to grant. Depending on what you grant, the Service may access:
| Google service | What the Service does with it |
|---|---|
| Gmail | Search and read messages to answer your questions and prepare summaries; draft and send messages; apply labels and filters; read and update mail settings such as forwarding and filters, when you ask. |
| Google Calendar | Read events to show your schedule; create, change or delete events and reminders you request. |
| Google Drive, Docs, Sheets, Slides | Find, read, create and edit files you point the assistant to or ask it to prepare. |
| Google Contacts, Tasks, Forms, Chat | Look up contacts, manage tasks, read form responses and work with Chat spaces, when you ask. |
| Apps Script, YouTube | Manage your script projects and read channel and analytics data, only for accounts that granted this access. |
| Basic profile | Your email address, to identify which account is connected. |
Google data is accessed only to carry out a task you request or a recurring task you set up (for example, a daily inbox summary). We do not browse your account for any other purpose.
Limited Use. Andres AI's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we:
- use Google user data only to provide and improve the user-facing features of the assistant;
- do not sell Google user data, and do not use or transfer it for advertising, credit-worthiness or lending purposes;
- do not use Google user data to develop, improve or train generalized or non-personalized AI or machine-learning models;
- do not allow humans to read Google user data, except with your explicit consent, where necessary for security or to comply with law, or when it is aggregated and anonymised for internal operations.
4. How the AI processes your data
To understand requests and write replies, the Service sends the relevant content (your message and any data needed to answer it, which may include Google data) to Anthropic, the provider of the Claude AI models, through its commercial API. Anthropic processes this content to return a response and, under its commercial terms, does not use it to train its models.
5. Where data is stored and who receives it
The Service runs on a private server in the European Union (Czech Republic). Access tokens for connected Google accounts and the Service's data are stored there, with access limited to the Operator.
We share data only with providers needed to run the Service:
- Anthropic PBC (USA): AI model processing, as described above.
- Telegram: delivery of messages between you and the assistant.
- Google: the Google APIs you authorised.
- Cloudflare: network and hosting of this website.
Transfers outside the EU rely on the providers' standard contractual clauses or equivalent safeguards. We do not sell personal data to anyone.
6. Retention and deletion
- Google access tokens are kept until you disconnect the account or revoke access.
- Content derived from Google data (for example a summary posted in a chat) stays in that chat's history until it is deleted.
- Chat history, notes and logs are kept while you use the Service and deleted on request or when your access ends.
You can revoke Google access at any time at myaccount.google.com/permissions. To have the Service delete your stored tokens and data, write to ai@sley.dev; we complete deletion within 30 days.
7. Security
Data is kept on a server administered by the Operator, reachable only over authenticated, encrypted connections. Connections to Google, Anthropic and Telegram use TLS. No method of storage is perfectly secure, but we limit access to what the Service needs to work.
8. Your rights
Under the GDPR you may request access to, correction of, deletion of, restriction of, or a copy of your personal data, and you may object to processing. Write to ai@sley.dev. You may also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), uodo.gov.pl.
Our legal basis is the performance of the service you asked for (Art. 6(1)(b) GDPR) and, for Google data, your consent given on Google's consent screen (Art. 6(1)(a)), which you can withdraw at any time.
9. Children
The Service is not intended for anyone under 16.
10. Changes
We will post any changes on this page and update the effective date. Material changes affecting Google user data will be communicated to connected users before they take effect.