Privacy Policy

Effective: February 16, 2026

Pal-E is built and operated by Lucas Draney as a solo project. This policy explains what data is collected, how it's stored, and what your rights are. Plain language, no legalese.

What we collect

• Telegram user ID and chat messages — your conversations with the bot are stored to provide context and continuity.
• OAuth tokens — when you connect Google, Notion, or LinkedIn, we store encrypted tokens to access those services on your behalf.
• Usage metadata — basic logs for debugging (timestamps, error codes). No analytics trackers, no ad networks.

What we don't collect

• Passwords. OAuth means we never see or store your passwords.
• Data from accounts you haven't connected.
• Anything beyond what's needed to run the service.

How your data is stored

All credentials and OAuth tokens live on self-hosted infrastructure managed directly by Lucas Draney. On Telegram, AI processing is done locally using open-source models via Ollama — no cloud AI provider sees your messages. When you use Pal-E's MCP servers through Claude.ai, your prompts and tool responses are processed by Anthropic per their privacy policy, but your OAuth tokens and credentials remain on Pal-E's private infrastructure.

• OAuth tokens are encrypted at rest.
• Infrastructure is isolated — each service component runs in its own container.
• No data is sold, shared, or used for training AI models.

Third-party services

When you connect an integration, Pal-E accesses that service's API on your behalf:

• Google (Gmail, Calendar) — governed by Google's Privacy Policy. Google integrations are currently in testing mode, meaning you are manually added as a test user.
• Notion — governed by Notion's Privacy Policy.
• LinkedIn — governed by LinkedIn's Privacy Policy.
• Telegram — the bot runs on Telegram's platform, governed by Telegram's Privacy Policy.

Data retention and deletion

Your conversation history and OAuth tokens are retained as long as your account is active. You can request deletion of all your data at any time by messaging the bot or contacting Lucas directly. Deletion is permanent and completed within 7 days of the request.

Google API disclosure

Pal-E's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Data from Google APIs is only used to provide the features you request (reading email, managing calendar events).
• Google data is not used for advertising, sold to third parties, or used to train AI models.
• Access is limited to what is necessary for the requested functionality.

Changes to this policy

If this policy changes materially, you'll be notified through the Telegram bot before the changes take effect.

Contact

Questions about privacy? Message Pal-E on Telegram or reach out to Lucas Draney directly via the bot.