Privacy Policy
Last updated: 2026-07-15
Data controller: FLIVIO OÜ (registry code 17235121), Meistri tn 6, Mustamäe, 13517 Tallinn, Harju maakond, Estonia. Privacy questions: info@flivio.org, +372 585 19 771.
This Privacy Policy explains what data X2GO — a personal AI agent in Telegram — collects and processes when you connect your Google accounts to it. We respect your privacy and collect only what's needed to fulfill your requests.
By connecting a Google account to X2GO, you agree to the practices described in this Policy.
Limited Use of Google user data
X2GO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not use it to train or improve generalized AI/ML models.
What Google data we read
We only access the Google services you've explicitly authorized during OAuth connection. Depending on the permissions granted, this may include:
Google Calendar — viewing, creating, and modifying events when you ask the agent to check your schedule or plan a meeting.
Gmail — reading emails and preparing draft replies when you ask it to check your mail or respond to a message.
Google Drive — opening and reading files when you ask it to find or process a specific document.
Google Docs — reading the content of documents you ask it to summarize or process.
Google Sheets — reading the content of spreadsheets you ask it to process.
We also collect basic profile data (your email address) to associate the connection with your account.
How we use this data
Google data is used solely to fulfill the specific request you send the agent in conversation — showing your schedule, finding an email, summarizing a document, and so on.
We do not use your Google data for advertising or profiling, and we do not share it with third parties except as described below.
Sharing with third parties
Anthropic (Claude): to process your request, relevant fragments of content (for example, part of your schedule, an email, or a document) are sent to the Claude model via Anthropic's API. Anthropic acts as a subprocessor and, under the terms of its commercial API, does not use this data to train its models.
Infrastructure providers: the bot runs on a private server (VPS), and this website is hosted on Vercel. These providers process data solely to keep the service running.
We do not sell your data or share it for advertising purposes. Data may be disclosed only where required by law.
Storage and retention
OAuth access tokens are stored encrypted and used only to make requests to Google APIs on your behalf.
Conversation context and history are stored so the agent can remember the conversation; they are kept no longer than needed to operate the service, or until you request deletion.
Your rights and revoking access
You can revoke X2GO's access to your Google account at any time at https://myaccount.google.com/permissions, and you can also disconnect individual connectors within the app itself.
You have the right to request access to your data, its correction, or its deletion by contacting info@flivio.org.
Data deletion
To delete your data, revoke access (see above) and send a request to info@flivio.org. We will delete stored Google data and related context within a reasonable time, except where retention is required by law.
Security
We apply the principle of least privilege, token encryption, and restricted access to systems. That said, no method of data transmission or storage is completely secure.
Children
The Service is not intended for individuals under 16, and we do not knowingly collect their data.
Changes to this Policy
We may update this Policy from time to time. We'll notify you of material changes by updating the date at the top of the page and, where appropriate, within the app.
Contact
For privacy questions, contact: FLIVIO OÜ, info@flivio.org.