Updated November 11, 2026

Privacy notice

This notice describes a personal OpenClaw installation operated for its account owner.

Information accessed

With the owner’s authorization, the assistant searches and reads personal Gmail message data, including message headers and message text. It uses this information for requested summaries, follow-ups, and proposed reply text. A separate iCloud connection reads only the personal calendars explicitly selected by the owner. The owner’s work Microsoft Exchange account is excluded.

Processing and sharing

The application runs on the owner’s server. Selected message or calendar content and the owner’s requests may be sent to the configured AI provider for processing. Responses are delivered through the owner’s configured messaging channel. These providers handle submitted data under their applicable settings and policies; local hosting does not mean that all processing occurs locally.

The installation does not sell Google user data or use it for advertising. It does not make the owner’s messages or calendars publicly accessible through this informational website.

Storage and retention

The server stores OAuth authorization material and the configuration needed to access the authorized account. OAuth tokens use an encrypted file keyring; its password is also stored in private server storage so the assistant can operate unattended. Conversation history, summaries, and saved notes may contain information derived from email or calendar events.

Calendar data is cached locally for approximately the preceding 30 days and following 365 days. Conversation and saved-note retention is controlled by the account owner. The backup job runs daily and retains the latest seven successful backups; backup archives can include authorization material, conversations, notes, and calendar caches.

Control and deletion

The owner can revoke the app’s access in Google Account settings, revoke the bot’s iCloud app-specific password, or remove calendar sharing. Revoking access stops future authorized reads; it does not automatically remove existing conversations, notes, caches, or backups. The owner can delete those stored copies from the private installation. Older backup copies remain until the owner removes them or successful backup rotation prunes them.

Website and contact

These informational pages contain no analytics scripts, advertising, forms, or tracking cookies. The hosting provider may process ordinary connection information when serving pages. The account owner is the administrator and support contact, identified by the support email configured on the Google authorization screen.