Privacy notice

Updated 25 October 2026. Roger is a personal assistant operated by Augustin Baudoin. Contact support@rogerpa.com for support or privacy requests. The assistant is currently a personal pilot. Roger's own Google OAuth application is awaiting verification; a separate managed connection through Composio is being introduced.

What Roger does

Roger helps you review recordings, find information, manage email and plan your calendar through WhatsApp. The iPhone app receives audio from your selected microphone or supported wearable. Only record conversations when you have the necessary permission from everyone involved.

We process your WhatsApp number, messages, attachments you provide, device identifiers, recordings, transcripts, summaries and preferences to provide these features. Audio may be stored locally and uploaded for processing. Recording status, microphone information and interruption events help us diagnose failures and provide recording alerts. Turning off capture in Roger does not necessarily turn off a separate wearable microphone.

Your optional Google connection

You choose whether to connect a Google account. The consent screen requests account identity, Gmail, Calendar and read-only Google Contacts permissions. These support the following features:

• Account identity: your Google account identifier, name and email associate the connection with your Roger account.
• Gmail: find and read relevant messages and threads, summarize them, prepare and send requested emails, and organize messages by archiving, restoring to the inbox, marking read or unread, and adding or removing stars. Email modification permission is needed for these organization actions. The current tools do not permanently delete messages or download Gmail attachments.
• Calendar: read events and busy periods to answer scheduling questions, and create events you approve. Availability access lets Roger check conflicts without needing the details of each event.
• Contacts: look up saved names, email addresses and phone numbers to resolve recipients for emails and requested calls. Roger does not edit Google Contacts. Contacts you manually share in WhatsApp are stored separately from the Google connection.

Google data is retrieved as needed for your requests and enabled tasks. Relevant content can appear in the assistant's conversation history, summaries, drafts and action records. Emails and calendar events are prepared for you to review; the current WhatsApp flow requires approval of the displayed preview before sending an email or creating an event.

When connecting through Composio, you authorize Calendar first and Gmail second. Google shows Composio as the app requesting access. These managed permissions include broad Gmail and Calendar access, read-only contacts and additional profile information; they are broader than the actions Roger currently offers. Review the exact permissions shown by Google before consenting. Roger uses the connection for the features described here, including contact lookups for requested phone calls.

The earlier email-only connection has been retired. Its background imports of Google Contacts and Gmail correspondent headers have stopped; old cached directories are no longer used for lookups. Contact and email searches now happen through your current connection when needed for your request.

AI processing and service providers

Relevant messages, Google data and task context may be sent to AI services to understand your request, summarize information or prepare an action. The current assistant uses OpenAI models through Vercel AI Gateway. Its browser assistant uses Meta models through that gateway and Kernel for hosted browser execution when a task requires it. The calling and recording services and voice transcription also use the OpenAI API directly. These are hosted API services; Roger does not operate a self-hosted general-purpose language model.

Vercel hosts the assistant. For connections you authorize through Composio, Composio holds the Google access credentials and processes the Gmail, Calendar and Contacts API requests and responses needed for Roger's features. Roger stores connection identifiers associated with your account and uses Composio's API to access the authorized data. Existing connections through Vercel Connect may remain in use during the transition; switching to Composio requires fresh consent. See Composio's privacy notice for its provider terms.

Neon stores the current assistant's conversation and action records. Supabase provides database and storage services for recording and earlier assistant features, and Render runs recording and action processing. Meta WhatsApp delivers messages, including the excerpts or drafts you ask Roger to show you. Recording features may also use ElevenLabs for speech processing and pyannote to distinguish anonymous speakers within a recording.

When you ask Roger to place a phone call, Revox processes the recipient's phone number, the call instructions and relevant context you approve, and returns the call result. That information can include a number found in Google Contacts or details from an email used to prepare your requested call. We send providers the information needed for the relevant feature; an unrelated recording or calling task does not require access to your Google account.

Processing may occur internationally. Providers' retention and security terms apply to their services; this notice does not promise that all data is processed only in Europe or that all providers retain no data.

Google Limited Use

Roger's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google user data only to provide or improve the user-facing features you request. This applies to both raw data received from Google APIs and data derived from it, including summaries, extracted contact details and drafts. We do not use raw or derived Google data to develop, train or improve generalized or foundation AI models. We do not sell Google user data, use it for advertising, or transfer it for creditworthiness or lending decisions. AI processing is for your individual task, not model training.

We restrict transfers of Google data to those needed to provide these features, with your consent, for security purposes, or where required by law. Human access to Google data is limited to what the policy permits, such as your explicit consent for a specific support request, investigating abuse, or a legal obligation.

Security, retention and your choices

Google access tokens are held by our connection services and associated with the relevant user. The retired connection is disabled. Its previously stored refresh-token record remains encrypted and inactive pending deletion. You should never send a password or access token to Roger in WhatsApp.

You can revoke Google access in your Google account permissions. For a managed connection, look for Composio; revoking a shared Composio Google grant may also affect other apps you connected through that provider. Revocation stops future access through that grant; it does not delete emails or events already created, messages already delivered, or data already stored by Roger. Contact us to request deletion of stored connection records, conversation history, drafts, recordings or your account.

During this pilot, cloud recordings, transcripts, conversation and action records are retained until deletion is requested; comprehensive automatic deletion is not yet implemented. Local recordings remain subject to the app's storage controls. Deleting the app alone does not delete cloud copies. WhatsApp messages already delivered remain subject to your and WhatsApp's message settings.

To request access, correction or deletion, or to stop messages, email support@rogerpa.com and identify your connected account. We verify your identity before disclosing or changing private information. AI output can be inaccurate; review drafts and proposed actions before approving them.