Privacy policy
Effective October 27, 2026
Scarlet is a privately operated assistant for a small group of invited family users. This policy explains how information is handled when Scarlet is used through Telegram and connected Google services.
Information Scarlet accesses
Depending on a user's request, configured briefings, and scheduled reminders, Scarlet may process Telegram messages, selected Gmail message content and metadata, selected Google Calendar event details, user-approved calendar entry details, school task information, accessible Google Drive file names and content, and documents sent to the assistant. Scheduled features may read connected Google services without a new chat message each time.
How Google data is used
Google data is used to provide requested or configured email summaries, planning, calendar assistance, reminders, and document assistance. The current Gmail integration reads messages and can save drafts for the account owner to review; it does not send email. Calendar features read the primary calendar and can add events or to-dos with due dates and times only through a separate approval workflow. Scheduled reminders may send relevant event or task details to the user's authorized Telegram chat. The current assistant does not edit or delete calendar events.
Drive features can search accessible files and read supported Google Docs, text files, and PDFs. Scarlet can create Google Docs or make supported text edits after an explicit user request. The current Drive tools do not delete files, change sharing permissions, or make files public.
Google's technical authorization scopes can allow more than the assistant's current tools expose. The local service configuration restricts the available operations. Scarlet does not use Google data for advertising or sell it.
Processing and service providers
Scarlet runs on a Mac managed by the assistant's administrator. To generate a response, relevant Telegram messages, selected email text, calendar details, and extracted document text may be sent to the OpenAI API. The OpenAI API states that inputs and outputs are not used to train models by default and that abuse-monitoring logs may retain content for up to 30 days, subject to legal requirements. See OpenAI API data controls.
Google processes requests to Google APIs. Telegram carries conversations and documents between users and Scarlet. Those providers handle data under their own terms and privacy policies, including Google's API Services User Data Policy. Scarlet's informational website does not connect to a Google account or provide an information-collection form.
Storage and retention
Scarlet's operational data is stored on the administrator-managed Mac. This can include session records, local task and document records, reminder state, service databases, and logs. Documents created or edited in Google Drive remain in the connected Google account. The current setup does not define one automatic deletion period for all local records; they may remain until removed by the administrator. Local backups may retain copies after removal from active storage.
Google authorization files are kept in Scarlet's local profile. They are not published on this website. Users can ask the administrator to remove local assistant data or revoke Scarlet's access from their Google Account.
Access and sharing
Scarlet is intended for up to five invited users, and assistant access is controlled separately from Google's OAuth consent screen. The administrator can access system-level records needed to operate the service. A user's private chat or uploaded documents are not intentionally sent to other users.
Contact
For privacy questions or a request to remove information from Scarlet's local system, contact privacy.scarlet@poyser.com.