Privacy Policy — Sam

Effective: September 2, 2026

Sam is a private personal automation assistant used only by its owner. This policy describes how Sam accesses, uses, stores, and shares Google user data.

Google user data Sam may access

• Gmail: message metadata, message content, thread information, labels, and search results as needed to perform owner-requested inbox review, search, summarization, and monitoring.
• Google Calendar: calendar and event information as needed to review schedules and provide calendar-related assistance.

How Google user data is used

Google user data is used only to provide features explicitly requested or configured by the owner, such as summarizing email, locating messages, checking schedules, and producing personal notifications or automation results.

Sam does not use Google user data for advertising, marketing profiles, sale, or unrelated purposes.

Storage and security

OAuth credentials used to access Google services are stored on the owner's private self-hosted system and protected by an encrypted credential store. The public website at rightto360.com does not store Gmail messages, calendar data, OAuth tokens, passwords, or other private Google account data.

Operational state or logs may be retained on the private system when needed to provide requested automations, prevent duplicate notifications, diagnose failures, or maintain continuity.

Service providers and processing

To perform requested natural-language processing, relevant Google user data may be transmitted to contracted computing or AI service providers solely for processing necessary to provide the requested feature. Sam does not authorize those providers to use Google user data for advertising or for unrelated purposes.

Sharing

Sam does not sell Google user data. Google user data is not shared with advertisers or data brokers. Data is disclosed only as necessary to operate owner-requested functionality, to contracted service providers acting on behalf of the owner, or when legally required.

Retention and deletion

The owner controls the underlying Google account and Sam installation. Access can be revoked through the Google Account security settings. Local OAuth credentials and retained operational data can be deleted from the owner's self-hosted system at any time.

Limited Use

Sam's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Changes

This policy will be updated if Sam's Google data access or handling practices materially change.

Contact

Questions about this policy may be sent to rightto360@gmail.com.