Privacy Policy

Last updated: October 16, 2026

Asterix is a personal assistant made by AH SLO LLC ("we"). It is used by one person, its owner, who connects their own accounts. This policy explains what data Asterix accesses, why, and what it does with it.

Data Asterix accesses from Google

When the owner connects a Google account, Asterix requests the following permissions, each used only for the purpose described:

• Gmail (read): to search the owner's messages and read a message when the owner asks a question about their email, and to notice important unread mail, shipping notices and bills so Asterix can remind the owner.
• Gmail (send): to send an email written with the owner, only after the owner has explicitly approved that exact message on their device.
• Gmail (modify): to mark messages as read or unread, archive them or star them, only after the owner's explicit approval. Asterix never deletes messages.
• Google Calendar (read): to list the owner's events and find free time when the owner asks about their schedule.
• Google Calendar (events): to create an event the owner asked for, only after the owner's explicit approval.
• Google Contacts (read): to find a phone number or email address when the owner asks to call or write to someone.
• Google Tasks: to list the owner's tasks, and to add or complete a task, adding and completing only after the owner's explicit approval.
• Google Drive (read): to search and read a file when the owner asks for a document.
• The account's email address, to tell connected accounts apart.

Anything that changes data (sending, archiving, creating, completing) needs the owner's explicit approval on their own device first. Asterix cannot delete messages, events, contacts or files.

How the data is used

• Data is read when the owner asks a question, and for the reminders the owner has switched on (an upcoming event, a shipment arriving, a bill due), to produce the answer or reminder shown to the owner.
• To write the answer, the relevant text is processed by an AI model that Asterix reaches through GitHub Copilot. The text is used only to answer the owner's request.
• Asterix does not use Google user data for advertising, does not sell it, and does not share it with anyone else.
• No person reads the owner's data, except where the owner chooses to share it or where the law requires.

What is stored

• Google access is kept as a revocable refresh token in an encrypted secret store (Google Secret Manager). Asterix does not copy or keep the content of emails, calendar events, contacts, tasks or Drive files in its database; it fetches them live and keeps nothing beyond a short-lived cache in memory.
• Conversations with Asterix (the owner's questions and Asterix's answers, which may quote short excerpts from the owner's own mail or calendar), and facts the owner asked Asterix to remember, are stored in Asterix's private database. Raw activity text is deleted after 30 days.

Limited Use

Asterix's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Security

Secrets are stored in Google Secret Manager. All traffic uses HTTPS. Actions that change anything outside Asterix require the owner's explicit approval on their device.

Your choices

The owner can revoke Asterix's access at any time at myaccount.google.com/permissions, and can ask us to delete all stored data by writing to ahslollc@gmail.com.

Contact

AH SLO LLC · ahslollc@gmail.com