Your information, explained
Privacy policy.
Last updated: 5 November 2026
MAYA is an owner-operated personal AI assistant by Aveor Studios. It is for the owner's private use, with no public registration. This policy covers its Google connection, AI-assisted email summaries, WhatsApp delivery and this informational website.
Google data we access
With the account owner's authorization, MAYA uses Google's OAuth sign-in and the Gmail read-only scope (gmail.readonly), together with basic account identity scopes. Read-only permission can cover the entire mailbox and email settings; it is not technically restricted by Google to unread messages or the inbox.
The configured assistant exposes bounded email search and message/thread reading. It uses account identity, senders, recipients, subjects, dates, message identifiers and email text needed for the owner's requests. It does not request permission to send or modify Gmail messages. Attachment downloading is not enabled in the current integration.
How we use the data
MAYA uses email information to answer the owner's questions, summarize messages and identify items that may require attention. It treats email contents as untrusted data, not as authorization to execute instructions. Summaries can be inaccurate; the owner should check the original email before acting.
AI processing and WhatsApp
Relevant email content and the owner's request are sent to the configured OpenAI service to generate a response. Requested summaries are sent through the existing WhatsApp connection to the owner's approved recipient. This is not entirely on-device processing. The OpenAI connection uses Codex through the owner’s ChatGPT account, so the applicable ChatGPT/Codex terms and account data controls govern this processing. OpenAI’s API-specific retention or training defaults are not assumed. Recipients’ devices and notification previews may also display summaries.
MAYA does not sell Google user data, use it for advertising or use it to develop or train generalized AI models. The owner’s ChatGPT model-improvement setting is disabled for this connection. This opt-out does not mean that OpenAI never stores or processes the content. MAYA's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data is shared only as needed for the owner-requested functionality or where legally required.
Storage and security
The assistant runs on the owner's Mac in a separate application home. Refresh credentials use macOS Keychain; private application files use restricted access. Email excerpts, tool results and generated summaries may remain in local conversation records. WhatsApp copies remain in the owner's conversation and may be included in phone backups. OpenAI may retain content to provide its services and for security, safety or legal purposes under its privacy policy. Disabling optional training does not eliminate retention. MAYA does not claim zero retention or a guaranteed 30-day deletion period for Codex requests. See OpenAI’s data controls for the distinction between training settings and retained data. This website does not receive mailbox contents or OAuth credentials.
The private MAYA dashboard currently uses synthetic data and is not connected to real Gmail summaries. Its authentication backups are encrypted separately.
Retention and deletion
Local records are retained according to the assistant’s history settings and the owner’s maintenance choices. The owner can remove retained assistant records and WhatsApp copies separately. Revoking Google access stops future access; it does not erase existing messages, summaries or backups. Copies retained by external providers are subject to their own retention and deletion processes.
Your choices
The owner can disconnect MAYA from each account in Google Account connections. The owner can also stop the assistant or request local data removal. Removing assistant copies does not delete original Gmail messages.
This website
This informational site contains no sign-in, email forms, advertising, analytics scripts or tracking cookies added by MAYA. When hosted, Cloudflare processes connection details such as IP address, request information and browser information to deliver and protect the website, under its privacy policy.
Contact and updates
Contact Aveor Studios using the contact options on aveorstudios.com. The OAuth consent screen also lists the monitored support email. This policy will be updated before material changes to MAYA's use of Google data.