Auf die Warteliste Warteliste

Legal

Privacy policy

Last updated: November 9, 2026 · Deutsche Fassung (the German version is authoritative)

1. Controller

Levin Keller
Hohenzollerndamm 152
14199 Berlin
Email: post@levinkeller.de

2. What this is about

This policy covers the website swavo.de and the service Swavo at app.swavo.de, which gives your AI assistant access to your calendar, contacts, tasks, documents and, optionally, your mail. Accounts are currently by invitation only.

3. Sign-in and account

You sign in with a passkey or with Google, GitHub or Microsoft; for emergencies you provide a recovery address at another provider. We store your identifier, email address and name, a session (cookie mg_session, strictly necessary, valid until 30 days after last use) and your settings.

4. Connecting an existing mailbox (optional): Gmail or IMAP/SMTP

IMAP/SMTP: if you connect a mailbox at another provider (e.g. GMX, WEB.DE, Posteo), Swavo stores its servers, user name and password; the password encrypted (AES-256-GCM) in the EU, only while the mailbox is connected. It is never shown and never given to an AI assistant; disconnecting deletes it at once, the copied mail stays. To find the server settings for unknown domains Swavo asks Mozilla's provider database (autoconfig.thunderbird.net) and DNS (Cloudflare) for the domain name only.

Connecting Gmail is optional and started by you: in the settings, or when signing up with Google ("Gmail-Postfach gleich verbinden", which you can untick, also on Google's page). You sign in with Google and grant these permissions:

  • openid and email: your Gmail address, so the right mailbox is connected and your mail can be sent with this address as the sender.
  • https://www.googleapis.com/auth/gmail.modify: reading all messages with attachments and labels, and the change history; changing labels, read and starred state; moving messages to Trash and back; sending messages on your behalf. Swavo never deletes messages permanently.

Purpose: Swavo keeps a synchronized copy of your mailbox in the EU so you (and the AI assistant you connect) can search, read, organize and answer it. Changes you make are written back to Gmail; you send through Gmail. The AI assistant can read mail and create drafts; sending, moving, deleting and other changes by the AI need your explicit approval.

5. Google API Services User Data Policy

Swavo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide the user-facing features described above. It is not sold, not used for advertising and not used to train generalized AI models. No human reads it unless you explicitly ask us to, it is necessary for security purposes (such as investigating abuse), or it is required by law. The refresh token is stored encrypted (AES-256-GCM) in the EU and never logged.

6. Where data is stored, and who receives it

All stored data stays in the EU (Cloudflare R2 and Durable Objects with EU jurisdiction). Recipients, each for the stated function only:

  • Cloudflare, Inc.: hosting, storage, mail delivery and the Turnstile check, as a processor.
  • Lyceum Technology (data centers in the EU; as a fallback possibly OVHcloud, EU): search vectors for semantic search.
  • Google Cloud (Vertex AI, EU region): text recognition and description of documents, as a processor.
  • The AI assistant you connect yourself (e.g. Claude by Anthropic, USA): reads what you ask it about in order to answer you.
  • Your push services (e.g. Google, Apple, Mozilla), only if you turn on notifications: encrypted notices of new mail.
  • Proton AG (Switzerland, EU adequacy decision): a copy of mail to support@, abuse@ and postmaster@swavo.de, so it reaches a person even when the service is down.
  • Spamhaus (block lists), if configured: lookups of IP addresses and domains from the headers of new mail.

7. Retention and deletion

You can disconnect Gmail at any time in the settings; Swavo then revokes its access at Google and deletes the token and sync state at once (you can also remove access at myaccount.google.com/permissions). Your content stays until you delete it or ask for your account to be deleted. Daily database backups are kept for 9, 35 or 331 days depending on their tier; deleted messages are removed from storage for good after 340 days.

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a data protection authority. The legal basis is Art. 6(1)(b) GDPR (providing the service you asked for) and, for the Gmail connection, also your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by disconnecting. Contact: post@levinkeller.de.