Privacy and data handling

Updated 13 September 2026. This page describes the owner's private installation of Groot Personal Mail.

Access and purpose

The owner authorizes read-only Gmail access to identify relevant messages, possible invoices and receipts and prepare personal summaries. The collector reads messages from the most recent 30 days, including spam, excluding trash, drafts and sent messages. Selected PDF invoice attachments up to 3 MB are downloaded, stored in a protected server archive and parsed locally for text from the first ten pages. Scans without text are held for review. PDF invoices and payment information may be sent to the owner-designated Telegram archive topic. Email is not sent, deleted, moved or marked as read by this integration.

Storage

Message content is processed in the collector's memory. Its database stores message identifiers, subjects, senders, dates, classifications, message links and extracted invoice fields, rather than full message bodies. Selected records are exported to a private Markdown knowledge base, an Obsidian viewing copy and backups. OAuth credentials are stored separately in a protected server configuration.

Service providers and AI

The installation runs on a one.com VPS. When preparing replies or briefings, the assistant may send selected records from its knowledge base through OpenRouter to the configured model provider. Telegram receives the owner's summaries and notifications. These services process the information under their own applicable terms and privacy policies. This is not an exclusively local processing system.

Mail-derived information is used for the owner's assistant features, not advertising or sale. This installation does not train a general-purpose model on email data.

Retention and deletion

The 30-day collection window is not a deletion schedule. Saved records currently remain until the owner removes them; automatic expiry is not implemented. Backup copies can retain earlier records until separately removed. The owner can request removal of live records and associated backups using the contact below. Revoking Google access stops future collection but does not automatically erase previously stored records.

Control and contact

The owner can revoke access in Google Account connections. For access, correction, deletion or questions, contact borisstormm@gmail.com.

This website

This informational website has no sign-up, analytics scripts, advertising or cookies. Hosting and network services may process connection information needed to serve requests. No private mailbox records are served by this website.