Privacy Policy

Last updated: 3 September 2026

1. Introduction

This privacy policy explains how achilles9.com ("we", "our", "us") collects, uses, stores, and protects your personal information when you use our personal AI infrastructure services. This is a personal project operated by Derek Clapham of Sydney, Australia.

We are committed to protecting your privacy in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

2. What Data We Collect

When you authorise our service through Google OAuth, we may collect the following categories of data:

• Email data: Reading, composing, sending, and searching your email messages across connected Google Workspace accounts.
• Calendar data: Reading and managing your calendar events and availability.
• Drive data: Reading and organising files in your Google Drive.
• Account metadata: Basic profile information such as your name and email address used to identify your account.

3. How We Use Your Data

Your data is used exclusively for the operation of personal AI assistant services, including:

• Managing your email inbox (triaging, drafting replies, filing messages)
• Managing your calendar (scheduling, checking availability)
• Organising files in your Google Drive
• Providing summaries, digests, and automated responses

4. Data Storage and Security

All data is stored on privately-owned NAS infrastructure located at a residential property in Sydney, Australia. We implement reasonable technical safeguards including:

• Encryption in transit (TLS 1.3) for all data transfers
• Access controls restricted to authorised accounts only
• Local network segmentation to limit exposure

No data is stored on third-party cloud servers, sold, or shared with any third party.

5. Data Retention

Data is retained only as long as necessary to provide the service. You may revoke access at any time through your Google Account permissions. Upon revocation, data associated with your account will be removed within 30 days.

6. Your Rights

Under Australian privacy law, you have the right to:

• Access the personal information we hold about you
• Request correction of your personal information
• Withdraw consent at any time
• Request deletion of your data
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

7. Google API Data Use

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only access the minimum data necessary to provide the service, and we do not use Google user data for advertising, training AI models outside your personal instance, or any purpose not explicitly disclosed in this policy.

8. Contact

For any privacy-related enquiries, please contact:

Derek Clapham
9 Achilles Rd, Engadine NSW 2233, Australia
Email: derek@derekclapham.com

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.

Privacy Act 1988 (Cth) — Australian Privacy Principles compliant.