Privacy Policy

Last updated: April 9, 2026

1. Who We Are

Blueberry ("we", "our", "us") is an autonomous AI agent service operated by DevJSX. Our contact email is elgrhydev@gmail.com.

2. What Data We Collect

When you connect an account (e.g. Gmail) through OAuth, we collect and store:

• Your Telegram user ID (to identify your session)
• OAuth access and refresh tokens, encrypted at rest
• Scope of permissions you granted
• Token expiry timestamps

We do not store email content, contact lists, or any data beyond what is necessary to execute actions you request.

3. How We Use Your Data

• To fulfil the specific actions you request (e.g. send or read an email on your behalf)
• To refresh OAuth tokens automatically so you stay connected
• To audit your requests in append-only logs for debugging

We do not sell, share, or use your data for advertising.

4. Google User Data

Blueberry's use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only access Gmail data to perform actions explicitly requested by you in Telegram.

5. Data Storage and Security

OAuth tokens are encrypted using AES-128 (Fernet) before being stored in our database hosted on AWS. Access is restricted to the application server only.

6. Data Retention and Deletion

You can disconnect any connected account at any time by sending /disconnect gmail in Telegram. This permanently deletes your stored tokens. To request full data deletion, email elgrhydev@gmail.com.

7. Third-Party Services

We use Stripe for payment processing. Stripe's privacy policy applies to payment data. We do not store card numbers.

8. Changes to This Policy

We may update this policy. Continued use of Blueberry after changes constitutes acceptance. Material changes will be announced via Telegram.

← Back to home