Privacy Policy

Last updated: 05 September 2025 • Authorized domain: ai-helper-bot.ru

1. Introduction

AI Google Disk Helper Bot (the “Service”) connects to your Google Drive (only with your explicit consent) and answers questions from the content you select. This Policy explains what we collect, how we use it, how we delete it, and what choices you have.

The Service’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. Controller & Contact

Controller: AI Helper Team • Email: ai.bot.helper.email@gmail.com

3. “Private text index” (what it is)

When you select files, we extract text and build a private text index — a search structure (tokens/vectors/snippets) tied to your Telegram ID. It exists only to retrieve relevant passages for answers. It is not a public database and is not shared with other users. You can delete it any time with /clear_knowledge or by emailing support.

4. Data We Collect

4.1 Google Account Data

• Email and basic profile (userinfo.email, userinfo.profile), OpenID identifiers (openid).

4.2 Google Drive Data

• Metadata: file ID, name, MIME type, size, modified time (for items you select).
• Content: extracted text from supported formats (PDF, DOCX, TXT, CSV, XLSX) for the items you select.

4.3 Telegram Data

• Telegram user ID (chat ID), your messages/commands, and files you send to the bot.

4.4 Tokens & Logs

• OAuth access/refresh tokens and expiry (to keep your connection working).
• Basic operational logs (timestamps/status/errors) for debugging and reliability.

4.5 Please do not provide sensitive data

Do not connect or send special-category/regulated data (health, biometric, government IDs, financial/PCI, precise geolocation, etc.).

5. User Consent (how it is given)

1. You tap “Connect Google Drive” in Telegram.
2. Google shows its official OAuth consent screen (in English) with the requested scopes.
3. Your consent is given when you approve on Google’s screen. You may deny or revoke at any time.

6. Google OAuth Scopes & Purpose

• openid, userinfo.email, userinfo.profile — identify you during OAuth and link the integration to your Telegram account.
• drive.metadata.readonly — list metadata so you can browse and select items.
• drive.readonly — read the content of only the items you selected to answer your questions.

7. Legal Bases (GDPR)

• Consent — you approve access on the Google OAuth screen.
• Contract — to provide the features you request.
• Legitimate interests — security, abuse prevention, diagnostics.

8. Use & Limited Use

9. Sharing & Providers

• Google — secure API calls over HTTPS; your account and Drive stay with Google.
• Telegram — messages transit under Telegram’s policies.
• AI inference — minimal text snippets may be sent to our provider (e.g., Groq) over HTTPS; we instruct providers not to train on your snippets.
• Hosting — reputable data centers; access limited by least-privilege and MFA where applicable.

10. Security

• Transport encryption via HTTPS; tokens stored encrypted at rest.
• Operational access restricted; activity logs monitored.

11. Retention & Deletion

• Private text index & related metadata: deleted immediately when you run /clear_knowledge or upon your email request.
• After you revoke Google access, we immediately stop any further reading of your Drive.

Deletion requests: ai.bot.helper.email@gmail.com.

12. International Transfers

Processing may involve transfers across regions (e.g., AI inference). We use appropriate contractual and technical safeguards.

13. Your Rights

• Access, rectification, erasure, restriction, portability, objection; withdraw consent by revoking access.
• Complain to a data protection authority where applicable.

14. Changes

We may update this Policy from time to time. If changes are material, we will notify on this page and/or in-bot where appropriate and required by law.

15. Contact

Email: ai.bot.helper.email@gmail.com