Wooderson ("Wooderson", "we", "us") is an AI agent application operated by Buckley Robinson and available at wooderson.ai. This policy explains what information the application accesses, how it is used, where it is stored, and what choices you have — including how to revoke access and how to delete your data.
Wooderson is a single-operator agent. It runs on infrastructure controlled by its operator and acts on behalf of the account owner who authorized it. There is no public sign-up and no third-party user accounts.
Information we access and collect
Google user data
When you authorize Wooderson to connect to your Google Account, it may access the following, depending on the scopes you approve:
Gmail — message metadata, message bodies, and attachments you ask it to work with
Google Calendar — calendars, events, and availability information
Google Drive — files and folders you ask it to read or create
Google Docs and Sheets — the contents of documents and spreadsheets you ask it to work with
Basic profile information — your name, email address, and Google Account identifier
Wooderson requests only the scopes needed to perform the tasks you ask of it, you may decline any scope, and you may revoke access at any time.
Other information
Authorization credentials — access and refresh tokens issued by Google, stored encrypted on the operator's systems and used only to make API calls on your behalf.
Content you provide — messages, prompts, and files you send to the agent.
Technical logs — timestamps, request metadata, and IP addresses used for security, troubleshooting, and abuse prevention.
How we use information
To perform the tasks you request — for example reading and summarizing email, drafting replies, creating calendar events, or reading and producing documents.
To authenticate you and keep your connection to Google working.
To secure the service, diagnose failures, and prevent abuse.
To communicate with you about the service.
We do not use Google user data for advertising, we do not sell it, and we do not use it to determine creditworthiness or for lending purposes.
Google API Services User Data Policy
Wooderson's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice, this means that Google user data is used only to provide and improve the features you have asked for; it is not transferred to third parties except as described in this policy or as required by law; it is not used for advertising or to determine creditworthiness; it is not used to develop, improve, or train generalized artificial intelligence or machine learning models; and it is not read by humans except where you ask for help with a specific item, where necessary for security purposes, or where the law requires it.
How information is shared
We share information only in these limited cases:
Service providers. Wooderson runs on third-party infrastructure, such as cloud hosting and storage, and may send content to third-party AI model providers through their APIs in order to generate a response or complete the task you requested. Those providers process the data only on our behalf to deliver that result, are not permitted to use it for their own purposes, and are bound by terms that prohibit using API content to train their models.
Legal requirements. When we are legally required to disclose information, or when disclosure is necessary to protect the rights, property, or safety of the operator or others.
At your direction. When you ask us to send, post, or share something on your behalf.
We do not sell personal information, and we do not share Google user data with third parties for advertising, marketing, or profiling.
Storage and retention
Information is stored on systems controlled by the operator, including Cloudflare-hosted infrastructure, and is encrypted in transit and at rest where the underlying service supports it. Data is retained only as long as needed to provide the service:
Authorization credentials — retained while your connection is active, and deleted when you revoke access or ask us to disconnect.
Task content and message history — retained until you delete it or ask us to delete it.
Security and diagnostic logs — retained for a short period, typically 30 days, and then deleted or aggregated.
Your choices and control
Revoke access. Visit myaccount.google.com/permissions, select Wooderson, and remove access. This immediately stops all further Google API access.
Delete your data. Email buck@wooderson.ai and we will delete the information we hold for your account, including stored tokens and task history. Verified requests are completed within 30 days, and we confirm when the deletion is done.
Access or export. Email the same address to request a copy of the information we hold about you.
Deletion of your Google Account. Deleting your Google Account removes our ability to access it; any remaining stored tokens and history are deleted as described above.
Children
Wooderson is not directed to children and is not intended for anyone under 13, or under 16 in the European Economic Area. We do not knowingly collect information from children.
International transfers
The service is operated from the United States. If you are outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.
Changes to this policy
We may update this policy as the service changes. The "last updated" date above reflects the current version, and material changes will appear in the policy published at this URL.
Contact
Privacy questions, access requests, and deletion requests: buck@wooderson.ai