SARATHI OS
Privacy Policy
1. About SARATHI OS
SARATHI OS (“SARATHI”) is a private, single-owner personal AI operating system. It is operated by Dhruvang Bhatt (the “owner”) for the owner’s own use on the owner’s own computer. It is not offered to the public, has no sign-up, and does not collect information from visitors to this website.
This policy explains what Google user data SARATHI accesses, why, where it goes, how long it is kept and how access can be removed.
2. This website
This website is a static information site. It has no accounts, forms, cookies, analytics or advertising, and loads no third-party scripts. Our web host may keep standard server logs (such as IP address and requested page) for security and operation.
3. Google user data SARATHI accesses
SARATHI connects only to the owner’s own Google account, and only with the owner’s consent through Google’s sign-in screen. Reading and writing use separate permissions, granted separately.
Read-only permissions
| Google service | Permission (scope) | What SARATHI reads |
|---|---|---|
| Google Calendar | calendar.readonly | Event times for the owner’s calendars. For the owner’s main calendar, only whether the owner is busy. For selected operational calendars, the event title, time, status, location and meeting link. |
| Google Docs | documents.readonly | The text of a short list of documents chosen in advance by the owner, up to a fixed character limit. |
| Google Sheets | spreadsheets.readonly | Cell values from specific sheet ranges chosen in advance by the owner, up to a fixed size limit. |
| Gmail (optional) | gmail.readonly | Only when the owner has switched Gmail on: for a bounded search of recent messages, the sender (partly masked), subject, date and a short preview; the body of a message or thread only when the owner selects it. |
Permissions to change Google Docs and Google Sheets
SARATHI can also change the owner’s Google Docs and Google Sheets. This uses a separate permission, granted separately from the read-only permissions above:
| Google service | Permission (scope) | What SARATHI can do with it |
|---|---|---|
| Google Docs | documents | Append text to, or replace a section of, a document on the owner’s pre-approved list. Creating a new document is possible only if the owner has enabled it. |
| Google Sheets | spreadsheets | Append rows to, or update a bounded range in, an approved tab of a spreadsheet on the owner’s pre-approved list. |
Each change is proposed first and carried out only after the owner approves that specific action. SARATHI’s own settings limit these changes to the owner’s pre-approved documents, spreadsheets and tabs. Please note that Google’s permission itself is broader than what SARATHI uses (Google offers no narrower permission for this purpose), so that limit is enforced by SARATHI rather than by Google.
SARATHI does not request permission to send or modify email or to change calendar events, and it does not browse or enumerate the owner’s Drive. Reading is limited to the items listed above.
4. How the data is used
Google user data is used only to provide features to the owner inside SARATHI: showing the day’s schedule, surfacing emails that may need a reply, and answering questions about the owner’s chosen documents and sheets, and, when the owner approves, updating those documents and sheets. It is not used for advertising, profiling, or credit or lending decisions, and it is not sold. SARATHI is not designed for anyone other than the owner to view Google user data.
SARATHI’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Where the data is processed and stored
- On the owner’s computer. SARATHI runs locally. Its services listen only on the computer itself and are not reachable from the internet. There is no SARATHI-operated cloud server that receives the owner’s Google data.
- Credentials. Google access credentials (including refresh tokens) are kept in access-restricted files on the owner’s computer. They are never displayed in SARATHI’s interface, and SARATHI redacts secret-like values from what it passes onwards.
- Information read from Google. Results that appear in a conversation or task are saved in SARATHI’s local history on the owner’s computer so the owner can refer back to them.
6. Third-party AI processing
SARATHI uses an external AI provider, OpenAI (via its API), to understand requests and write responses. When the owner asks SARATHI something that involves Google data, the relevant portions of that data (for example, a day’s calendar entries, or an excerpt of a selected document, sheet or email) may be included in the request sent to OpenAI so that it can produce an answer or a proposed change. Text that SARATHI writes into a Google Doc or Sheet may likewise be generated by OpenAI.
Google user data is sent to OpenAI only to provide the features the owner has asked for, not for advertising. SARATHI does not itself use Google user data to train AI models. Once content reaches OpenAI, how OpenAI stores and uses it is governed by OpenAI’s own terms and policies (openai.com/policies), and OpenAI may retain API content for a period under those policies.
Spoken replies (optional). If the owner turns on spoken responses, the text of SARATHI’s reply, which may include Google user data such as calendar details, is converted to speech using Microsoft’s online text-to-speech service (the “Edge” voices). That text is sent to Microsoft for that purpose only, and Microsoft’s own terms govern it. Speech-to-text for voice input runs locally on the owner’s computer. Apart from OpenAI, Microsoft’s speech service when enabled, and Google itself, SARATHI is not designed to send Google user data to any other third party.
7. Retention
- Access credentials are kept until the owner revokes access or deletes the credential files.
- Information read from Google that appears in SARATHI’s local history has no automatic expiry. It stays on the owner’s computer until the owner deletes it. SARATHI’s history is also limited to a fixed number of most recent items in several stores, so older items are dropped over time.
- Changes written to Google Docs and Sheets are stored in the owner’s Google account like any other edit, and are subject to Google’s own retention and version history.
- Data held by OpenAI is retained according to OpenAI’s API data policies, not by SARATHI.
8. Revoking access and deleting data
- Revoke at Google. The owner can remove SARATHI’s access at any time at myaccount.google.com/permissions. After revocation SARATHI can no longer read the account and reports that it needs reconnection.
- Turn Gmail off. When the owner switches Gmail off inside SARATHI, SARATHI makes no further Gmail requests to Google.
- Delete local data. The owner can remove SARATHI’s stored credentials and its saved local history from the computer. Deleting local data may be irreversible, so the owner should do it only after following SARATHI’s approved backup and recovery procedure and confirming what will be removed. Deleting a local file does not by itself revoke access at Google, so the owner should also revoke at the link above.
9. Security
SARATHI limits what it can reach, and it treats reading and writing differently:
- Read-only tools. Reading Calendar, Docs, Sheets and Gmail uses fixed, read-only tools with size limits. Raw Google identifiers are replaced by opaque references, and the read credentials are checked against the exact approved read-only permissions before use.
- Separately authorised write operations. Changes to Google Docs and Sheets use a different credential, authorised separately, and are available only for the owner’s pre-approved documents, spreadsheets and tabs. Each write is proposed first and carried out only after the owner approves that specific action. The write credential is likewise checked against its exact approved permissions before use.
- Inside SARATHI. Changes made inside SARATHI require the owner to be signed in.
No system is perfectly secure, and the owner remains responsible for securing the computer SARATHI runs on.
10. Children
SARATHI is not directed at children and does not knowingly collect information from them.
11. Changes to this policy
If SARATHI’s handling of Google data changes (for example, a new Google permission is requested), this policy will be updated before the change takes effect, and the “Last updated” date above will change.
12. Contact
Questions or requests about this policy: dpbhatt02@gmail.com