Privacy Policy

Effective 2026-09-02. Vegapunk is a self-hosted personal assistant operated by and for a single individual (the owner). It is not offered as a service to anyone else.

What it accesses

With the owner's explicit authorization via Google OAuth, Vegapunk accesses the owner's own Gmail account using read-only and draft-composition scopes. It can read and search the owner's mail and create draft emails. It cannot send email.

How data is handled

• All data stays on the owner's private home server. No data is sold, shared, or transmitted to third parties, except to Anthropic's API for generating responses at the owner's request.
• Google user data is used only to provide functionality to the owner (reading mail, preparing drafts) and never for advertising, profiling, or model training.
• OAuth tokens are stored on the owner's server with restricted file permissions. Access can be revoked at any time at myaccount.google.com/permissions.

Retention & deletion

Email content is processed transiently and not stored beyond what is needed for the requested action. Deleting the stored token (or revoking access in Google Account settings) removes all Gmail access immediately.