Privacy policy

Scope and operator

Enzo Brain is Matthew Bertulli’s private Hermes G Brain installation. It is used only with Gmail and Google Calendar accounts owned by Matthew. It is not a public service and does not accept public registrations. Matthew operates the installation and can be contacted at m@mattbertulli.com.

Google account data

Enzo Brain accesses information from the owner’s connected Gmail and Google Calendar accounts within the permissions granted through Google authorization. Depending on those permissions and the task, this information may include email messages and associated sender, recipient, and subject information, and calendar events and their details. The permissions displayed by Google at authorization determine what the installation can access or do.

This access supports personal assistance with the owner’s email and calendar information. Google account data is not made available through this public website.

Hosting and AI processing

The installation runs on Railway. Information needed for its operation is processed in that hosting environment. Enzo Brain uses OpenAI’s ChatGPT/Codex for AI assistance, so Gmail or Calendar information relevant to a task may be sent to OpenAI for processing.

Railway and OpenAI operate their own infrastructure and may handle operational records under their applicable terms, privacy policies, and the owner’s account settings. Temporary processing by Enzo Brain is not a promise of zero retention by those providers. See Railway’s privacy policy and OpenAI’s privacy policy.

Temporary processing and retention

Enzo Brain processes emails, calendar events, and summaries temporarily for the task or session. It does not keep them as a persistent email, calendar, or summary archive between sessions. Original messages and events remain in the owner’s Google accounts unless changed through an authorized action.

Connection credentials and operational records are separate from email, event, and summary content. This policy does not specify an automatic expiry period for those records or for records retained independently by hosting or AI providers.

Permitted use of Google data

Google account data is used for the owner’s personal, user-facing tasks. It must not be sold, used for advertising, or used to train generalized AI models. Any transfer to a service provider must be limited to providing the requested functionality and comply with Google’s applicable requirements.

Enzo Brain’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. This commitment also applies to information derived from Google data.

Access controls and revocation

The owner controls access to the private installation and its connected accounts. Google permissions can be reviewed and revoked at Google Account connections. Revocation stops access under that authorization but does not itself erase information previously processed by a provider.

For questions about access, deletion of installation-held data or credentials, or provider records, contact m@mattbertulli.com. Provider-held records are subject to the relevant provider’s deletion controls and retention terms.

Changes

This policy will be updated if the installation’s data handling changes. Connecting other people’s accounts, retaining content between sessions, or adding different data recipients would require revisiting these disclosures before that use begins.