Privacy Policy – OpenClaw

Last updated: October 24, 2026

OpenClaw is a private personal assistant operated by Fulbert Gato Junior (“we”) for his personal and professional use. This page explains which data the application accesses through Google APIs, and how that data is used, retained and protected.

1. Who can use the application

OpenClaw is not a public service. It is used exclusively by its owner, to access his own Google accounts. No other users are accepted.

2. Google data accessed

With the explicit authorization of the account owner, OpenClaw may access the following data through the Gmail API:

• the email address and basic account identifier (to identify the connected account);
• Gmail messages: sender, recipients, subject, date, content and attachments;
• message labels and status (read/unread, archived);
• basic Gmail settings (for example send-as addresses and signatures).

3. How the data is used

This data is used solely to provide the features requested by the owner:

• reading, searching and summarizing his emails;
• notifying him when important messages arrive;
• sorting or archiving messages at his request;
• drafting and sending emails on his behalf, only after his explicit approval.

The data is never sold, rented, shared with third parties for commercial purposes, or used for advertising or profiling.

4. Processing by an AI model

To summarize or draft messages, email excerpts may be sent to the provider of the artificial intelligence model used by the assistant (Anthropic), solely to produce the requested response. This data is not used to train general-purpose AI models.

5. Retention and security

• OAuth access tokens are stored encrypted on a private server, reachable only through a private network (VPN).
• Emails are not copied or permanently archived: they are read on demand through the Gmail API.
• Any generated summaries or notes are kept only on this private server and can be deleted at any time.

6. Compliance with Google policy

OpenClaw’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Revocation and deletion

Access can be revoked at any time from https://myaccount.google.com/permissions. After revocation, the stored tokens are deleted from the server. Any data deletion request can be sent to the contact below.

8. Contact

Fulbert Gato Junior – gatojunior.co@gmail.com

This is an English translation of the French policy at gatojunior.co/privacy, which prevails in case of discrepancy.