Privacy Policy

lol.Ai is run by one person. This policy says exactly what the software does, because the software is small enough to describe honestly.

What we collect

• Your account. If you sign in with Google or GitHub we store the name, email address and avatar URL they give us. We never receive your password.
• Your questions and their answers, so you can reopen a thread later. Signed-out visitors get answers but nothing is saved.
• A daily counter for signed-out visitors, identified by a salted one-way hash of the IP address. We do not store the address itself and cannot recover it from the hash.
• Messages from accounts you connect, described below.

Google user data

If — and only if — you connect a mailbox in lol.Chat, lol.Ai requests two Gmail permissions, which Google will list on its own consent screen before you agree to anything:

• gmail.readonly — to read your mail so it can appear in your lol.Chat inbox.
• gmail.send — to send the replies you write, from your own address.

We deliberately do not request the broader modify permission that would cover both. lol.Ai cannot delete, archive, label or alter anything in your mailbox. That is a limit Google enforces, not a promise you have to take our word for.

What we do with it:

• We fetch recent messages — the last seven days when you first connect, then the last two days on each refresh — and store the sender, subject, plain-text body, timestamp, Gmail message and thread ids, and the names, types and sizes of attachments. Attachment contents are never downloaded or stored.
• We store your Google refresh token encrypted at rest, so the inbox can update while you are looking at it.
• When you use a feature that summarises or drafts, the relevant message text is sent to our model provider (below) to produce that answer. It is not sent anywhere else, and it is not sent at all unless you use such a feature.

We do not use your Gmail data for advertising, sell or rent it, transfer it to anyone except as described here, or use it to train any machine-learning model — ours or anybody else’s. No human at lol.Ai reads your mail, except where you explicitly ask us to investigate a problem, where the law requires it, or where it is necessary to investigate abuse or a security incident.

Limited Use

lol.Ai’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Documents you attach

PDFs and text files you attach are read in your browser. The file itself is never uploaded and never reaches our servers. The text we extract from it does become part of your question, so it is sent to the model provider along with the question — but the document stays on your device. Images are the exception: they are resized and sent, because reading an image requires a model that can see it.

Who else sees your data

• Groq — our model provider. Receives the text (and any image) of the question you ask, in order to answer it.
• Vercel — hosting. Neon — the database. Both hold data on our behalf and use it for nothing else.

There is no advertising on lol.Ai, no analytics tracker, and no third party we sell anything to. If that ever changes, this page changes first.

Keeping it, and deleting it

Connected-account data is kept while the connection is live. Disconnect an account in lol.Chat and its stored credentials and messages are deleted. You can also revoke lol.Ai’s access to your Google account at any time at myaccount.google.com/permissions, which cuts us off immediately and independently of us. To delete your whole account and everything in it, email the address at the bottom of this page and we will do it.

Security

Credentials for connected accounts are encrypted before they are written to the database, with a key held only in the server environment. Everything travels over HTTPS. lol.Ai is a small project run by one person and makes no claim to be audited or certified; this section describes what we actually do, not a guarantee against every possible failure.

Children

lol.Ai is not intended for anyone under 13.

Changes

If this policy changes in a way that affects what happens to your data, the date at the top changes and the change is described here.