ExecutiveAgent Empire

Privacy Policy

Effective: May 12, 2026

In plain English: ExecutiveAgent Empire is a personal automation tool used by a single operator. It accesses only that operator's own Gmail and Google Calendar data, stores everything encrypted on a private server, and never shares, sells, or advertises against any data.

1. Scope

This Privacy Policy describes how ExecutiveAgent Empire ("the Service," "we," "us") handles data accessed via Google OAuth on behalf of the authenticated user.

2. Data We Access

With the user's explicit OAuth consent, the Service accesses:

Gmail messages — read access to the authenticated user's own inbox for the purpose of summarizing, classifying, and surfacing relevant correspondence.
Google Calendar events — read access to the authenticated user's own calendar for the purpose of generating daily briefings and scheduling context.

The Service accesses only data belonging to the user who authenticates. It does not access data belonging to anyone else.

3. Purpose of Use

Data is used solely to power personal productivity automations for the authenticated user — daily briefings, summaries, reminders, and related private outputs. Data is never used to train models, generate advertising, or build profiles.

4. Storage and Security

All accessed data is stored on a private virtual server controlled by the user (the "VPS"). Sensitive data, including OAuth tokens and message contents, is encrypted at rest using AES-256-GCM. Network transport uses TLS. Access to the VPS is restricted to the user.

5. Sharing

The Service does not share, sell, rent, trade, or transfer any accessed data to third parties. Data is not used for advertising and is not aggregated into any external dataset. The Service does not include third-party analytics or tracking.

6. Retention

Data is retained on the user's VPS only as long as needed for the automation use case. The user may delete stored data at any time by removing it from the VPS.

7. User Control and Revocation

The user retains full control of their Google data at all times. OAuth access can be revoked at any moment via the user's Google Account settings:

https://myaccount.google.com/permissions

Revocation immediately ends the Service's ability to access new data.

8. Children

The Service is not intended for and is not used by anyone under 13.

9. Changes

If this policy changes, the updated version will be posted at this URL with a new effective date.

10. Contact

Questions about this policy can be sent to todd.daviau@gmail.com.