James Privacy Policy

Last updated: October 20, 2026

James is a personal AI assistant operated by the owner of getjames.ai. For privacy questions or requests, contact privacy@getjames.ai.

Information we process

Depending on the features you authorize and use, James may process calendar events (including titles, times, descriptions and locations), Microsoft email content and metadata (including senders, subjects, message bodies and previews), tasks, reminders, attention items, and information you submit to the assistant. The service also processes authentication and connection information necessary to operate.

Google Calendar data

James requests the Google Calendar read-only OAuth scope to retrieve calendar lists and events for schedule displays and assistance. This integration does not request permission to edit or delete Google Calendar events. A Google OAuth refresh token is stored server-side to maintain access. Google information is used to provide the authorized Calendar features. James's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Microsoft Mail and AI processing

James can retrieve Microsoft mailbox information through Microsoft Graph. Its requested permissions include Mail.Read and Mail.Send. Selected email information may be sent to the OpenAI API for email triage or assistance. James uses an API setting of store: false for the identified email-triage operation; this is not a guarantee that no provider retains any information. Additional providers and features may have different practices and will require updated disclosures.

Purposes and service providers

We process information to provide requested scheduling, messaging, task, and assistant functions; maintain authorized connections; secure the service; and diagnose errors. Relevant infrastructure and processing services include Google, Microsoft, OpenAI, Vercel and Redis-backed storage. Cloudflare provides domain and privacy-contact email routing services. Information is transmitted to these services when necessary for the relevant function.

Storage, retention and security

James stores certain connection credentials, tasks and attention information in server-side storage. Application and infrastructure logs may also be generated. There is not currently a verified universal automatic deletion period for all categories of information. Information may remain until deleted, the associated service is decommissioned, or a deletion request is processed, subject to operational, legal and provider retention requirements. The application uses authenticated sessions and server-side credentials, but no online service can guarantee complete security.

Your choices and deletion requests

You can revoke James's Google access through your Google Account permissions and manage Microsoft permissions through your Microsoft account. Revoking provider access does not necessarily delete information already stored by James. To request access, correction, disconnection or deletion of information held by James, email privacy@getjames.ai. We will review and respond to requests, explain any limits, and coordinate deletion where feasible. We do not represent that automated account-wide deletion is currently available.

Changes and contact

This policy may be updated as James changes. The updated date will appear above. For questions about data use, privacy or deletion, contact privacy@getjames.ai.