Short version: ORDERLY is a private, self-hosted assistant for one operator. Google credentials stay on that operator's host. Google user data is used only to provide the features the operator requests. It is not sold, used for advertising, or exposed through this website.
Who operates ORDERLY
ORDERLY is developed and operated by Ray Weiss / Conflict Simulations LLC. It is not offered as a public or multi-user service. Questions about this policy may be sent to the support address displayed on ORDERLY's Google authorization screen.
Google user data ORDERLY accesses
ORDERLY accesses Google user data only after the operator completes Google's OAuth consent flow. It requests the following access:
- Identity email, OpenID, and user information email: used to identify and bind the Google account selected by the operator.
- Gmail read-only: used to search for and read messages needed for inbox review, summaries, briefings, and operator questions.
- Gmail compose: used to create and manage drafts requested by the operator. This Google scope can authorize sending at the provider level. ORDERLY's runtime policy disables Gmail send and draft-send commands.
- Google Calendar read-only: used to read calendars and events for agenda views, briefings, and operator questions.
How Google user data is used
ORDERLY uses Google user data only to perform an action requested or configured by the operator, such as answering an inbox question, preparing a draft, showing an agenda, or producing a scheduled private briefing.
Mailbox or calendar content needed for a response may be sent to the model provider configured by the operator. Briefing text may be delivered to the operator through the private notification channel the operator configured. Those providers process the transmitted data under their own terms and privacy policies.
Storage and retention
- OAuth refresh credentials are stored in a mode-private credential store on the operator-controlled host. They are not stored on hammerstein.ai or committed to a source repository.
- Google remains the source of mailbox and calendar records. ORDERLY does not operate a separate public mailbox database.
- Content needed to fulfill a request may appear in private local agent sessions, operational logs, operator-created notes, or Gmail drafts. Retention is controlled by the operator's host and provider settings.
- Credentials remain until the operator revokes, replaces, or removes them. Temporary OAuth verifier records are consumed when authorization completes.
Sharing and disclosure
ORDERLY does not sell Google user data, use it for advertising, or provide it to data brokers. It discloses only the data needed to the services selected by the operator to perform the requested feature, including Google APIs, the configured model provider, and the configured private notification provider.
Cloudflare serves these static policy pages and may process ordinary web-delivery metadata such as IP address, request path, timestamp, and response status. The ORDERLY policy pages do not receive mailbox content or OAuth credentials and contain no client-side script, form, or cookie-based tracking.
Google API Services User Data Policy
ORDERLY's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Security controls
- Credentials are separated from source code and public web content.
- The mail runtime receives only its private credential store and scoped command surface.
- Sending mail is disabled in the runtime even though draft creation requires Google's compose scope.
- The public disclosure pages have no connection to the private ORDERLY service.
Operator choices and deletion
The operator can stop future access by revoking ORDERLY in the Google Account permissions page and removing the local credential. Gmail drafts can be reviewed or deleted in Gmail. Locally retained sessions and logs can be removed according to the operator's host-retention procedures.
Children
ORDERLY is a private operator tool and is not directed to children.
Changes
This policy will be updated if ORDERLY's Google scopes, data flow, storage, providers, or operating model materially change. The effective date above records the latest revision.
Contact
Privacy and authorization questions may be sent to the support address displayed on ORDERLY's Google authorization screen.