Privacy Policy

Last updated: 14 October 2026

JoaquAIm (joaquaim.pt) is an AI assistant and personal desktop operated by OpenCloud (opencloud.pro), Portugal. This policy explains what data we process, why, and your rights.

1. Data we process

• Account data: name, email address and login credentials (passwords are stored hashed).
• Workspace content: messages, files, notes and settings you create in your workspace.
• Connected services: when you choose to connect a service (e.g. Google), the OAuth tokens and the data that service returns when you ask the assistant to use it.
• Technical logs: IP address, timestamps and error logs, kept for security and troubleshooting.

2. Google user data

If you connect a Google account, JoaquAIm requests only the scope of the service you select (Gmail, Google Calendar, Google Docs, Google Sheets or Google Drive) plus your email address to identify the connected account. We use this data only to provide the features you ask for inside your own workspace — for example reading and creating calendar events, reading, labelling and drafting emails, or reading and editing the documents you point the assistant to.

JoaquAIm's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Google user data is not sold, not used for advertising, and not used to build user profiles.
• Google user data is not used to train generalised AI or machine-learning models.
• Google user data is not transferred to third parties except as needed to provide the feature you requested (e.g. sending the text of an email you asked the assistant to summarise to the AI model processing your request), to comply with law, or with your explicit consent.
• Humans do not read your Google data unless you explicitly ask us to (support), it is needed for security or abuse investigations, or it is required by law.

Tokens are stored on our servers in the EU, with access restricted to your workspace. You can disconnect at any time in JoaquAIm (Connectors) or at myaccount.google.com/permissions; the tokens are then deleted.

3. Purpose and legal basis

We process data to provide the service you signed up for (contract), to keep it secure (legitimate interest), and to meet legal obligations. We do not sell personal data.

4. Processors

Hosting in the EU (Hetzner, Finland/Germany); AI model providers used to answer your requests, which process the request content only to produce the answer; email delivery providers. Each is bound by data-processing terms.

5. Retention

Workspace data is kept while your account is active and deleted within 30 days after you close it. Technical logs are kept up to 90 days.

6. Your rights

Under the GDPR you may access, rectify, delete, port or restrict the processing of your data, and object to it. Write to joaquaim@opencloud.pro. You may also complain to the Portuguese authority CNPD (cnpd.pt).

7. Contact

OpenCloud · joaquaim@opencloud.pro · opencloud.pro