Privacy policy

Personal gog / OpenClaw Google connection

Effective October 11, 2026

Scope and operator

This policy applies only to Tim Lu's personal Google account integration using gog with OpenClaw (the “App”). The App is for the operator's own use and connects only to the operator's own Google account. It is not offered as a public service.

timlu.ai hosts this policy as the App's public privacy policy URL. The App is separate from the timlu.ai website, its chatbots, contact form, and other tools. This policy does not describe those website features, and hosting this policy does not give the website access to the App's Google account data.

Google data accessed and purposes

The App uses Google OAuth authorization. Access is limited to the permissions granted by the operator and the data needed for the operator's requested tasks:

• Gmail: email messages, headers, attachments, and labels to find, read, organize, draft, or send email as requested and permitted.
• Google Calendar: calendars and event details to review schedules and create, update, or delete events as requested and permitted.
• Google Drive: file metadata and file contents to find, read, create, or update files as requested and permitted.

The App stores OAuth credentials needed to maintain the authorized connection. It uses Google data only to carry out these personal email, scheduling, and file-management tasks. It does not request access to other people's accounts.

Storage and security

The App runs on the operator's own computer. OAuth credentials and any locally retained Google data, task history, or logs remain on that computer. Google continues to store the original emails, events, and files in its services; authorized changes are sent back to Google. Google API communication uses HTTPS. Local data is protected through the computer's access controls.

The App's Google data is not uploaded to timlu.ai or its website hosting service and is not sent to cloud AI providers.

Sharing and other uses

The App does not sell Google data, share it with advertisers or data brokers, use it for advertising, or use it to train general-purpose AI or machine-learning models. It does not share Google data with third-party processors. When the operator explicitly sends an email, invites someone to a calendar event, or shares a Drive file, Google delivers that content to the intended recipients as part of the requested action. The operator can view their own data while using the App; no additional human reviewers are given access.

Retention, deletion, and revoking access

Local credentials and retained data are kept only while needed for the connection or the operator's personal tasks, and can be deleted by the operator from the App's local storage, including any retained logs or backups.

The operator can revoke the App's access at any time through Google Account connections. Revocation prevents further authorized access but does not automatically erase copies already retained locally. Deleting local App data does not delete the original emails, events, or files in Google; those can be managed in the corresponding Google service.

Google API Limited Use

The App's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Changes and contact

This policy will be updated before the App accesses new types of Google data or changes how it uses, stores, or shares that data. Any newly required permissions will require authorization by the operator.

For questions about this personal integration or its data handling, contact Tim Lu at windowsminiserver@gmail.com.