Privacy Policy - Menachem, Personal Assistant

Last updated: 03.10.2026

Who we are

"Menachem" is an AI personal assistant operated by Wisemation. Contact: connect@wisemation.io.

Who it is for

Menachem serves a single user ("the user"). It is not a public service, nobody can sign up, and it answers only the user.

What Menachem accesses

• The user's personal Gmail: reading (Google scope gmail.readonly): search, read messages and threads, list labels, and download an attachment when the user asks. Sending mail (Google scope gmail.send): each mail is sent only after the user approves that exact mail with a button in a separate Telegram approval chat. It never deletes or changes mail in this mailbox.
• The Wisemation business mailbox, read-only (Google scope gmail.readonly): search, read messages and threads, and list labels. It never sends, replies, deletes or changes anything in this mailbox.
• The Wisemation business calendar and the user's personal Google Calendar (personal calendar: Google scope calendar.events, and only the account's primary calendar): reading events, and creating and updating events when the user asks. It deletes an event only after the user approves it.
• The Google account address (Google scopes openid and email), for the personal calendar and for sending mail, only to confirm that Menachem is connected to the right account.
• WhatsApp messages between the user and Menachem, including a morning calendar summary once it is switched on.
• Telegram messages between the user and Menachem.
• Documents and notes the user keeps in their private knowledge base.

This data may include details about other people, for example someone who emailed the user or appears in their calendar. Menachem uses them only to serve the user.

How the data is used

• Only to do what the user asks and what the user set up in advance: summarise, search, remind, schedule, reply to them, send them a morning briefing and save notes to their knowledge base.
• To write an answer, the relevant text is sent to a language model, through OpenRouter to OpenAI. Under both companies' public policies, data sent to them this way is not used to train models. OpenAI may keep it for up to 30 days for abuse monitoring, unless the law requires longer retention. At OpenRouter, routing requests to providers that train on the data is also switched off.
• When the user asks for a web search, the search terms are sent to the Exa search service. When the user asks Menachem to use a particular website, for example to fill in an appointment form for them, the data needed for that is sent to that website.
• No advertising, no profiling, and we do not train models on this data.
• No person other than the user reads the content, unless needed for security or required by law. Technical maintenance is done with the help of AI agents (Anthropic's Claude), which may see content only when a fix requires it.

Where it is stored and for how long

• Menachem runs on a private server Wisemation rents from Hostinger, in a data centre in Frankfurt, Germany.
• Mail and calendars stay at Google. Menachem reads them on demand and keeps no copy of the mailbox.
• Downloaded attachments are deleted automatically once they are 30 days old, by a check the mail tool runs each time it starts and on every file download.
• Google access tokens are stored on the server in access-restricted files. The sending token is kept separately, in a part of the server Menachem itself cannot reach. Connections to Google, to WhatsApp and to the model provider are encrypted.
• Conversation history with Menachem, including mail and calendar content that came up in a conversation, is kept on the server for as long as it is needed for the work, and is deleted on request.
• A note the user asks to save goes into their private knowledge base: the note moves from the server to the user's computer, the knowledge base is kept there and in a private repository on GitHub, and a read-only copy of it is also on Menachem's server.

Sharing

We do not sell, rent or share this data. It goes only to the providers the service needs to work: Google (the mail and calendar source), Meta (WhatsApp), Telegram, Hostinger (the server), OpenRouter and OpenAI (the language model), Exa (web search), Anthropic (the maintenance agents) and GitHub (the knowledge base), and to websites the user asked it to use, for example to fill in a form for them, and to recipients of an email the user approved. This applies unless the law requires otherwise.

Google user data

Wisemation's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google is not used to create, train or improve artificial intelligence models.

Revoking access and deleting data

Hebrew version: ביטול גישה ומחיקת מידע

• Google access can be revoked at any time at Google Account permissions.
• To ask for deletion of data Menachem stored (files, history, notes), including data about you that reached it through the user's mail or calendar, email connect@wisemation.io. We confirm the request and delete within 30 days.
• To stop WhatsApp contact with Menachem, ask by email as above, and stored messages are deleted. Copies held by Meta fall under Meta's own policy.

Changes

If the use of data changes, this page is updated before the change, with a new date.