The short version. Your assistant runs on a server registered in your name, not ours. What it reads from your email and calendar is used only to do the job you asked for, is kept on your server, is never sold, is never used for advertising, and is never used to train AI models. You can disconnect it at any time.
1. Who we are
Private Assistants ("we", "us") is a service based in Dubai, United Arab Emirates, that builds private AI assistants for individual clients. Each assistant is installed on a server registered in the client's own name, and the client holds the keys to it once the build is handed over.
This policy covers two things: this website, and the assistants we build, including how an assistant handles data it receives from Google when you connect your Google account.
Contact for anything in this policy: hello@privateassistants.ai.
2. This website
- We do not use cookies, analytics, advertising pixels or tracking scripts on this site.
- Our hosting provider keeps standard server logs (such as IP address, browser type and the page requested) to keep the site secure and running. We do not use them to identify you.
- Fonts are loaded from Google Fonts, which means your browser connects to Google's servers to fetch them.
- If you contact us by email, WhatsApp or Telegram, we receive what you send and use it only to reply to you and, if you become a client, to deliver your build.
3. Your assistant and where your data lives
Your assistant runs on a server you own and pay for directly. The messages, documents, voice notes and records it handles are stored on that server, in an encrypted vault protected by a passphrase you set and we never see.
During the build we have temporary administrative access to your server so that we can install and configure it. At handover you generate your own keys, every credential we touched is rotated by you, and our access is removed in front of you. After that, we cannot access your server or its data unless you choose to switch on a temporary support link yourself.
4. Google user data
If you choose to connect your Google account, your assistant asks for permission to access only what it needs:
- Gmail: to read your messages so it can summarise, sort and find them for you, and to create drafts of replies for you to review. By default it does not send email on your behalf.
- Google Calendar: to read your events, and to create or update events when you ask it to. Calendar changes are confirmed back to you.
How Google user data is used
Google user data is used only to provide and improve the features you use directly in your assistant: reading, summarising, searching and drafting email, and managing your calendar, at your request. It is not used for any other purpose.
How it is stored
Data received from Google is stored on your own server, in your encrypted vault, alongside the rest of your assistant's records. It is not stored on any server we operate.
How it is shared
- To answer a request, the relevant content is sent to the AI model provider that powers your assistant, solely so that the model can generate a response for you. It is not shared for any other purpose.
- We do not sell Google user data.
- We do not use or transfer Google user data for advertising, including personalised, retargeted or interest-based advertising.
- We do not use or transfer Google user data to determine creditworthiness or for lending purposes.
- No person reads your Google user data unless you give explicit permission for a specific message or event, it is necessary for security purposes such as investigating abuse, or it is required to comply with applicable law.
No AI training
Google user data is never used to develop, improve or train generalised artificial intelligence or machine learning models, by us or by anyone we share it with.
Limited Use
Private Assistants' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting Google
You can revoke your assistant's access to your Google account at any time from your Google Account at myaccount.google.com/permissions. Once revoked, your assistant can no longer read your email or calendar. Anything it has already filed stays in your own vault until you delete it.
5. Services your assistant relies on
Your assistant uses a small number of outside services, each through an account you hold and pay for directly:
- the server provider that hosts your assistant and its backup;
- the AI model provider that generates its responses;
- a voice provider, if you use voice notes;
- the messaging apps you choose to talk to it through, such as WhatsApp or Telegram.
Each of these processes data under its own terms. Your server is configured so that it can only send data to this short list of approved services; anything else is refused by the network.
6. How long data is kept
Your assistant's records stay on your server for as long as you keep them. You can delete any record, or the whole vault, at any time. Your backup server keeps a daily encrypted copy, which is replaced as new copies are made.
Information you send us before or during a build (such as your intake questionnaire and our correspondence) is kept only as long as we need it to deliver the build and meet any legal or accounting obligations.
7. Security
Each server is built with no public login and no open inbound ports, an outbound allow-list, approved-number messaging only, and an encrypted vault and backup. No system is perfectly secure, but these layers are designed so that the failure of one does not expose your data.
8. Your rights
Subject to applicable law, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you can ask us what personal data we hold about you, ask us to correct or delete it, or object to how we use it. Because your assistant's data is held on your own server, you can also access and delete it directly. To make a request, email hello@privateassistants.ai.
9. Children
Our service is not intended for anyone under 18, and we do not knowingly collect data from children.
10. Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change materially affects how your Google user data is used, we will tell you before it takes effect.