Privacy Policy

XCIX Lab · Effective 1 November 2026

Who runs it

XCIX Lab, including the "n8n xcix" email assistant, is operated by Ahmed Badawood for personal use only. It acts only on his own accounts. It does not offer a service to, or collect data from, anyone else.

What data it accesses

With the owner's consent through Google sign-in, the assistant uses the Gmail API to read messages (headers and text) and labels in the owner's own Gmail accounts. It may also apply labels or archive messages, only after the owner approves.

How the data is used

• To write summaries of new email for the owner.
• To flag messages that need action.
• To suggest mailing lists to unsubscribe from.

The data is not sold, not used for advertising, and not used to build profiles of anyone.

Where it is processed and stored

• The assistant runs on a server the owner controls. It is not reachable from the internet.
• Google sign-in tokens are stored encrypted on that server.
• Email content is not kept after processing, except in logs of failed runs, which are deleted after 7 days.

Sharing

To produce summaries and classifications, the text of relevant messages is sent to Anthropic's Claude API, under Anthropic's commercial terms. No other third party receives the data. Only the owner has access to the results.

Google API Services User Data Policy

XCIX Lab's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

Access can be removed at any time from Google Account → Security → Your connections to third-party apps & services → n8n xcix.

Changes

This policy may be updated. The date at the top shows the latest version.