AssembleAI
Back to Become an Expert
Privacy Policy

Privacy Policy for Assemble Twins

Last Updated: April 1, 2026

Overview

Assemble Twins is a desktop application that creates a “Knowledge Twin” — a personalized AI model trained on your professional email communications. This policy explains how we collect, process, and protect your data.

Data We Access

Email Data (via Google Gmail API)

  • We request read-only access to your Gmail account using the gmail.readonly scope
  • We only access emails from your Sent folder
  • We do not access drafts, inbox, spam, or other folders
  • We do not have the ability to send, delete, or modify your emails

What We Extract

From your sent emails, we extract:

  • Email body text (your written content)
  • Subject lines
  • Timestamps
  • Recipient addresses (for context only)

How Your Data Is Processed

On-Device Processing

The Assemble Twins desktop application performs the following locally on your computer:

  • PII (Personally Identifiable Information) scrubbing — names, emails, phone numbers, and other sensitive data are redacted before any cloud processing
  • Email deduplication
  • Initial clustering and filtering

Cloud Processing

Scrubbed, anonymized email content is sent to our secure backend for:

  • Knowledge extraction using large language models (LLMs)
  • Embedding generation for semantic search
  • FAISS index creation for your Knowledge Twin

What We Do NOT Do

  • We do not store your raw emails on our servers
  • We do not sell or share your data with third parties for marketing
  • We do not use your data to train our models
  • We do not retain your email content after processing is complete

Data Storage

Your Knowledge Twin

  • Your generated Knowledge Twin (rules, memories, opinions, and embeddings) is stored on our servers to enable querying
  • You can download your complete twin at any time
  • You can permanently delete your twin and all associated data at any time

Authentication Tokens

  • OAuth refresh tokens are stored securely in your operating system's keychain (macOS Keychain, Windows Credential Manager)
  • Tokens are never transmitted to our servers

Third-Party Services

ServicePurposeData Shared
Google Gmail APIEmail accessOAuth tokens only
OpenRouterLLM inferenceAnonymized, scrubbed text
Cloud hosting providerBackend infrastructureProcessed knowledge only

Your Rights

You have the right to:

Access

Download your complete Knowledge Twin at any time via the app

Delete

Permanently delete your twin and all associated data directly within the app using the "Delete Twin" button. This immediately removes your twin from our servers.

Revoke

Disconnect your Gmail account and revoke access at any time via the app’s "Sign Out" function or via Google Account settings.

Portability

Export your twin as a downloadable file via the app

Data Security

  • All data transmission uses TLS 1.3 encryption
  • PII is scrubbed locally before any cloud transmission
  • Authentication uses industry-standard OAuth 2.0 with PKCE
  • We do not store passwords

Data Retention

Data TypeRetention
Raw emailsNever stored; processed in memory only
Scrubbed contentTemporarily processed; not retained after twin generation
Knowledge TwinRetained until you delete it via the app’s "Delete Twin" function
Usage logsRetained for 90 days for debugging purposes

When you delete your twin through the app, all associated data (knowledge vectors, metadata, and earnings records) is permanently removed from our servers immediately.

Children's Privacy

Assemble Twins is not intended for users under 18 years of age. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy periodically. We will notify users of significant changes via the application or email.

Contact

For privacy inquiries or data deletion requests:

Google API Services Disclosure

Assemble Twins' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.