Privacy Policy

1. Who operates this application

Batal OpenClaw is a privately operated personal AI-assistant project managed by Maher Khayyat. It is currently configured for a single authorized Google account, not as a public multi-user service. This informational website does not provide public access to the assistant or its connected Google account.

2. Google data and permissions

With the account holder's authorization, the app currently has access to the following Google services and associated types of data:

• Google Drive: access to Drive files and their contents, including reading, searching, creating, uploading, updating and managing files; used for authorized reports and backups.
• Gmail: access to email messages and metadata, with capabilities to read, modify and send email when the account holder requests such tasks.
• Google Calendar: access to events, including viewing, creating, modifying and deleting events upon authorized instruction.
• Google Docs, Sheets and Slides: access to document, spreadsheet and presentation content for authorized reading, creation and editing workflows.

These are permissions granted to the application; not all capabilities are used routinely. The observed active workflows primarily involve Drive reporting and backups. The app is not configured to continuously import all Google content into an AI model.

3. Why data is used

Google data is accessed to perform tasks authorized by the account holder, such as managing files, preparing and publishing reports, creating backups, processing requested documents, managing messages and handling calendar events. Access is intended for the requested personal productivity functions, not for advertising, resale, credit scoring or unrelated profiling.

4. Processing and sharing

The application connects to Google through Google APIs. It runs in an environment hosted by Hostinger. Selected content from connected services may be included in an AI-assistant request when the account holder specifically asks for analysis, drafting or summarization; that content may then be processed by the configured AI model provider, currently OpenAI, to fulfill the requested function. Authorized output may also be delivered through a messaging channel selected by the account holder.

The application operator does not sell Google user data or use it for targeted advertising. Google user data must not be transferred for training general-purpose AI models or for other purposes prohibited by the Google API Services User Data Policy. The use of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

5. Storage and security

Google authorization credentials and working files are stored in the assistant's private server environment. Credential files have restricted operating-system permissions. Authorized reports and files may be stored locally and in the connected Google Drive account. Backup copies are encrypted with Restic before upload to Google Drive. No claim is made here that the server's entire local disk is encrypted.

No security measure eliminates all risk. The public GitHub Pages website contains informational pages only; it does not contain Google access tokens, private accounting records or live assistant credentials.

6. Retention and deletion

Working files, reports and backups may remain until deliberately deleted. A backup-retention plan exists, but automatic deletion of old backups is not currently active, so there is no guaranteed automatic deletion period.

The account holder can revoke this application's Google access at Google Account — Third-party connections. Revocation prevents future authorized Google API access but does not automatically erase existing local files, reports, credentials or backup copies. Separate deletion of those stored materials is required. The account holder may request or perform that deletion through the project operator, subject to any applicable legal obligations.

7. Changes and contact

If the application's features, access permissions or data practices change, this policy should be updated before any newly disclosed use occurs. For questions about this project or requests concerning stored data, contact the operator at maherkhayyatx@gmail.com.