Privacy policy.
Last updated: October 10, 2026
Okra is a privately operated personal AI assistant intended for its owner's use only. This policy describes how the project handles Google account data and other information used to provide requested assistance. Okra is not offered for public sign-up.
What information Okra accesses
When authorized by the account owner, Okra may access Gmail message identifiers, metadata, message bodies, and conversation information to find important messages, identify reminders, or summarize email. Where enabled, Okra may also create email drafts for the owner to review. The currently configured Gmail integration does not provide the AI agent with an email-send operation.
Why the information is used
Google account information is used only to provide owner-requested personal assistant functions, such as searching mail, prioritizing messages, extracting relevant due dates, and preparing draft replies. It is not used for advertising, profiling for advertising, or sale of personal data.
How information is processed and stored
Okra's integration and orchestration software run on privately managed infrastructure. OAuth credentials are kept separately from the AI agent and protected with access controls. Depending on the owner's chosen AI model configuration, limited relevant email content may be transmitted to a third-party AI model provider to process a requested task. Such processing is subject to the selected provider's terms and privacy practices. Operational logs, conversational history, and generated drafts may be retained according to the owner's local configuration; no universal automatic deletion period is promised.
Sharing and disclosure
Okra does not sell Google user data. It does not disclose it to advertisers or unrelated third parties. Information may be processed by service providers needed to perform a task requested by the owner, including configured AI inference providers, and where required by applicable law.
Google API data use
Okra's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google account data is used only for the assistant features authorized by the owner.
Security and human oversight
Okra uses restricted integrations and local access controls. Gmail message content is treated as untrusted input and may be filtered or redacted to limit disclosure of security codes and account recovery details. These measures reduce risk but cannot guarantee perfect detection. Email drafts are intended for owner review before sending; Okra is not authorized to send email automatically.
Access, revocation, and deletion
The owner can revoke Okra's access at any time in Google Account connections. Revocation stops further authorized API access but does not automatically delete already retained local logs or drafts. The owner can request deletion of locally retained information through the contact below, subject to applicable requirements.
Changes
This policy may change when Okra's features or service providers change. Updates will be posted on this page with a revised date.
Contact
For questions about this project or its data practices, contact support@okra.gripe.