Privacy, by design.

How Sam, a privately operated personal AI assistant, accesses and uses information to provide owner-authorized assistance.

Last updated: 23 October 2026

1. Who operates Sam

Sam is a privately operated personal AI assistant intended for its owner's personal use, not a general-purpose public service. For privacy enquiries, contact privacy@lim.nexus.

2. Information Sam may access

When the owner authorizes an integration, Sam may access information necessary for requested workflows, including:

• Google account profile and sign-in information needed for authentication;
• Gmail messages and metadata, where email permissions have been granted;
• Google Calendar event details, where calendar permissions have been granted;
• Google Drive files and metadata, where Drive permissions have been granted;
• Conversations, task information, notes and other information voluntarily supplied to Sam or stored in connected services.

Actual access is limited by the OAuth permissions granted and the integrations enabled. Sam does not need every category listed above for every interaction.

3. How information is used

Information is used to answer owner requests, retrieve relevant content, summarize information, manage authorized tasks, support reminders and personal organization, and maintain the operational context needed for the assistant. Google user data is not used for advertising or sold to data brokers.

4. AI processing and connected services

To provide AI assistance, content relevant to a request may be transmitted to the configured AI model provider for processing. Authorized workflows may also exchange data with connected productivity services. Infrastructure providers may process data as necessary to host, secure or operate the service. Such processing depends on the integrations, providers and settings used by the owner.

5. Storage and retention

Conversation context, notes, configuration, tokens and operational data may be stored on the assistant's server or in connected services. Encrypted backups may be retained on privately managed storage according to the operator's backup and retention procedures. Data is retained as needed for the personal assistant's operation, troubleshooting and recovery, and can be deleted or revoked through the relevant service and account controls. Backup copies may remain until their scheduled expiry.

6. Security

Sam uses access controls and restricted administrative connectivity intended to limit unauthorized access. OAuth tokens and other credentials should be kept private. No online system can guarantee absolute security.

7. Your choices and revocation

The account owner can disconnect integrations and revoke Google's authorization through Google Account third-party connections. Revoking access prevents further authorized Google API access but does not automatically delete previously stored records or backups. Data deletion requests and operational questions can be directed to the contact listed above.

8. Google API data

Sam's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Access is used for user-facing functionality initiated or authorized by the account owner and not for advertising. Google information is not transferred to third parties except as necessary for the requested service, secure operations, as permitted by the policy, or where legally required.

9. Changes to this policy

This policy may be updated when Sam's integrations, processing arrangements or operations change. The date at the top indicates the latest published revision.

This page describes the intended operating practices of a private assistant. The operator should review it against the actual Google OAuth scopes, providers, logs and retention settings before publishing or submitting it for verification.