Henry OS Privacy Policy
Effective October 14, 2026.
Henry OS reads Gmail message metadata and snippets from INBOX and SENT and primary Calendar event details for accounts whose owners consent. The current implementation does not download attachments.
Google account identifiers, OAuth credentials, source evidence and review proposals are stored privately on the operator’s Mac. Review content is processed by a local AI model. Google data is not sold, used for advertising, shared with data brokers or used to train generalized AI models.
OAuth credentials are encrypted in n8n; the Mac uses FileVault. Local backups contain sensitive data and encryption material and are restricted to the operator. n8n execution records are pruned after 24 hours with a maximum of 1,000 records. Canonical evidence and proposals remain until the operator deletes them; up to seven rotating local backup sets may retain earlier copies.
Access can be revoked through Google Account permissions or the operator’s local n8n credentials. Revocation stops future access and does not automatically erase existing local evidence. Contact henry [at] hm3.io to request review or deletion of retained data.
Henry OS’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.