Les lectures de Farzad

Privacy Policy

Last updated: 29 October 2026

This policy covers two things operated by Farzad FARID, a private individual based in France (the “operator”, “I”, “me”):

  1. the website farzy.org (the “Website”);
  2. the personal, non-commercial software tools that use the Google OAuth client registered by the operator in Google Cloud (the “Application”), such as the gog command-line client for Google Workspace and a self-hosted personal assistant built on it.

The Application is not a commercial product or public service. It is used only by the operator and by a small number of people the operator personally knows and has explicitly invited (such as family members).

1. Contact

Data controller: Farzad FARID. For any privacy question or request, write to farzy@farzy.org.

2. The Application and Google user data

2.1 What data is accessed

When you sign in with Google and grant consent, the Application may access, depending on the permissions (scopes) you approve:

  • your basic Google account profile (email address, name);
  • Gmail messages, labels and drafts, and the ability to send or modify email;
  • Google Calendar calendars and events;
  • Google Contacts;
  • Google Drive files, Google Docs and Google Sheets.

You can review the exact permissions on Google’s consent screen before approving, and you can approve only a subset of them.

2.2 How the data is used

Google user data is used only to provide the features you directly ask for: for example reading, searching, summarising or drafting email, checking or creating calendar events, or reading and editing your own documents, on your own instruction. It is not used for advertising, profiling, market research, or any purpose unrelated to these user-facing features.

2.3 Where the data is processed and stored

  • The Application runs on devices or servers controlled by the user themselves, or on a private server operated by Farzad FARID at the user’s explicit request. There is no central database collecting users’ Google data.
  • OAuth tokens (which let the Application act on your behalf) are stored encrypted on the device or server where the Application runs, and are never published or shared with anyone else.
  • Email, calendar, contact and document content is fetched from Google on demand to fulfil a request and is not copied into any permanent store by the Application, apart from logs or conversation history kept on the device or server running it, which the user can ask to have deleted.

2.4 Sharing and AI processing

Google user data is not sold and is not shared with third parties, except:

  • when you use an AI assistant feature, the content needed to answer your request may be sent to the AI model provider configured for that assistant (for example Anthropic) solely to generate the response. Such providers are used under terms that do not allow them to train their models on this data;
  • when required by law, or to protect the security of the service.

Google user data is never used to develop, improve or train generalised or non-personalised AI or machine-learning models.

2.5 Limited Use

The Application’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2.6 Revoking access and deletion

You can revoke the Application’s access at any time from your Google Account’s third-party connections page. Revoking access invalidates the stored tokens. You can also ask the operator, at the address above, to delete any tokens, logs or other data held on a server he operates; this will be done within 30 days.

3. The Website

The Website is hosted on WordPress.com, operated by Automattic Inc., which acts as hosting provider.

  • Hosting, logs and statistics. When you visit the Website, Automattic collects technical data such as your IP address, browser type and pages visited, to serve the site, keep it secure, and provide the operator with aggregated visitor statistics (Jetpack Stats). The operator only sees aggregated statistics, not individual visitors’ IP addresses. See Automattic’s Privacy Policy.
  • Cookies. WordPress.com sets cookies needed to run the site and, subject to your choice in the cookie banner, for statistics. See Automattic’s Cookie Policy.
  • Comments. If you leave a comment, the name, email address and website you enter, together with your IP address and browser user agent, are stored to display the comment and filter spam (Akismet). Your email address is never displayed publicly; a hash of it may be used to show your Gravatar profile picture if you have one. You can ask for your comments to be removed at any time.
  • The Website has no advertising and does not sell or rent any personal data.

4. Legal basis and your rights (GDPR)

For the Application, data is processed on the basis of your consent, given on Google’s consent screen, which you can withdraw at any time as described above. For the Website, the basis is the operator’s legitimate interest in running and securing the site, and your consent for non-essential cookies.

Under the EU General Data Protection Regulation you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and to data portability. To exercise these rights, write to the address above. You may also lodge a complaint with the French data protection authority, the CNIL.

5. Security

Reasonable measures are taken to protect data: encrypted transport (HTTPS/TLS), encrypted storage of OAuth tokens and secrets, restricted administrative access, and regular security updates on servers.

6. Children

Neither the Website nor the Application is directed at children under 15.

7. Changes

This policy may be updated. The date at the top shows the latest revision; significant changes affecting users of the Application will be communicated to them directly.