Privacy Policy
Effective 13 August 2026
This policy explains what data Wallace collects, how it is used and stored, and the choices available to you. Wallace is operated by Polaris Technologies ("we", "us"). It applies to the Wallace web application and its backend services.
1. Who this policy covers
Wallace is a private AI personal assistant. Access is restricted to a single pre-authorized Google account; the server rejects sign-in attempts from any other account. This policy describes how we handle data for that authorized user.
2. Google user data we access
When you connect your Google Account, you are asked to grant the permissions below. Wallace requests nothing beyond these, and each is used only for the stated purpose.
| Permission | How Wallace uses it |
|---|---|
Your identity and email address openid, email | Confirms which Google account is signing in, so access can be limited to the single authorized account. |
Read your Gmail messages and settings gmail.readonly | Lets Wallace summarize your inbox, answer questions about specific messages, and pull details such as booking confirmations into travel and calendar features. |
Send email on your behalf gmail.send | Sends the replies and messages you have approved, and sends unsubscribe requests when you ask Wallace to remove you from a mailing list. |
Create and manage drafts gmail.compose | Prepares reply drafts for you to review before anything is sent. |
Modify labels and message state gmail.modify | Applies your triage decisions — marking mail as read, labeling, archiving, or deleting the messages you tell Wallace to clear. |
View and manage your calendars calendar | Reads your schedule to find availability and answer questions about it, and creates or updates events at your request. |
3. Other data we collect
- Conversation history. Messages you exchange with Wallace over text and voice, so it can maintain context within and across sessions.
- Assistant memory. Facts, preferences, and decisions Wallace records from your conversations in order to personalize future responses.
- Documents you upload. Financial statements and similar files you provide, together with the transactions extracted from them.
- Location, if you allow it. Used to make recommendations and travel suggestions relevant to where you are. You can decline, and Wallace continues to work.
- Authentication and operational data. OAuth tokens, a session cookie, and server logs needed to keep the service running and secure.
4. How we use your data
Your data is used solely to provide and improve the assistant features you invoke: triaging mail, managing your calendar, planning travel, organizing finances, and maintaining the memory that makes those features useful.
To generate responses, relevant content — which may include the text of emails, calendar entries, and your messages — is sent to our third-party AI model providers for processing. These providers act on our behalf and are contractually restricted from using the content to train their models.
5. Limited Use of Google user data
Wallace's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we do not:
- transfer or sell Google user data to third parties, other than the service providers described in this policy, or as required by law or in connection with a merger or acquisition;
- use Google user data for serving advertisements of any kind;
- use Google user data to develop, improve, or train generalized AI or machine learning models;
- allow humans to read Google user data, unless we have your explicit consent for specific messages, it is necessary for security purposes or to comply with applicable law, or the data has been aggregated and de-identified.
6. How we share data
We do not sell your data. We share it only with service providers that are necessary to operate Wallace, and only to the extent required for them to perform their function:
- AI model providers, to generate assistant responses.
- Voice processing providers, to enable spoken conversations.
- Cloud hosting and database providers, to run the application and store your data.
We may also disclose data where required by law or to protect the rights, safety, and security of our users and our service.
7. Storage, retention, and security
Data is stored in our managed cloud database. Access to Wallace requires authentication, sessions are carried in an HTTP-only cookie, and OAuth credentials are held server-side and never exposed to the browser. Transport is encrypted in production.
We retain your data for as long as your account remains connected and the service is in use. When you disconnect Wallace or request deletion, we remove the associated data as described below. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
8. Revoking access and deleting your data
To revoke Wallace's access to your Google Account at any time, visit myaccount.google.com/permissions, select Wallace, and choose Remove access. Wallace immediately loses the ability to read or act on your Gmail and Calendar data.
To request deletion of the data Wallace has stored — including cached mail and calendar content, conversation history, assistant memory, and uploaded documents — email musaib@polaristechnologies.io. We will action the request and confirm once it is complete. Revoking access in Google does not by itself delete data already stored, so send the deletion request as well if you want it removed.
9. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us at musaib@polaristechnologies.io to exercise any of these rights.
10. Children
Wallace is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect their data.
11. Changes to this policy
We may update this policy as Wallace changes. The effective date at the top of this page reflects the most recent revision, and material changes will be communicated within the application.
12. Contact
Polaris Technologies — questions about this policy or your data: musaib@polaristechnologies.io
See also our Terms of Service.