Privacy

Privacy policy

Effective 15 October 2026.

Ergot is a private assistant for one person. Your data is not used for advertising, is not sold and does not train AI models.

1. Who is responsible

Ergot is Mateusz's privately operated AI assistant and dashboard at ergot.cloud. There is no public sign-up and no user accounts. The operator responsible for processing is reachable at ergotcloud@gmail.com.

2. What data we process

• Google Calendar: event titles, dates, times and calendar names, read-only, used to build the daily plan. Ergot writes nothing to the calendar.
• WHOOP: sleep, recovery and strain (read-only), shown on the Health tab and used in the daily plan.
• Shopping: the shopping list kept in the dashboard.
• Decisions: questions and answers recorded in the dashboard, with notes on each matter.
• Private dashboard token: sign-in uses a token; afterwards the browser receives a session cookie (HttpOnly, SameSite=Strict, valid up to 90 days, removed on sign-out). There are no user accounts or passwords. Google and WHOOP access tokens are kept server-side, outside the public website.

3. Why

Only to run the assistant: planning the day, reminding about matters, tracking shopping and decisions. Data is not sold, rented or used for advertising, profiling or credit decisions.

4. Google and Limited Use

Ergot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google data is not used to train, fine-tune or improve general-purpose AI models. Access is limited to reading the calendar; any wider scope will be described here before it takes effect.

5. AI processing and third parties

When you ask Ergot to do something, the necessary part of the content may be sent to an AI model provider that processes it only to produce the answer. Beyond that we do not disclose data to third parties, unless required by law or needed for security and abuse prevention.

6. Where and how long

Dashboard data is stored on a private VPS run by the operator, separate from the public website, and connections use HTTPS encryption. Data is kept as long as the assistant needs it, or until you ask for deletion. No system can guarantee complete security.

7. This website

The public site uses no analytics, advertising trackers, third-party scripts, fonts or CDN. The server may keep IP addresses, request times and paths in technical logs, solely to operate and secure the service. The only cookie is set by dashboard sign-in.

8. Revoking access and deleting data

You can revoke Google access at any time in your Google account connections, and WHOOP access in your WHOOP account settings. To delete stored data (lists, decisions, copies of calendar and health data, tokens), write to ergotcloud@gmail.com. Revoking access does not by itself delete earlier copies; deleting Ergot's copies does not delete the originals in Google or WHOOP.

9. Changes and contact

Send questions about access, correction or deletion to ergotcloud@gmail.com. This policy does not limit your rights under data protection law. Material changes will be posted on this page with a new date.