Orion is a personal AI assistant developed by Lex (contact: ljvela@gmail.com). It helps authorized users manage their email, calendar, files, and communications through a unified interface.
When a user authorizes Orion via Google OAuth, the application obtains scoped access to the user's own Google account data:
gmail.readonly, gmail.modify, gmail.send): read, search, send, and draft emails on the user's behalf.calendar, calendar.events): read, create, update, and delete calendar events.drive): access, search, and manage files in the user's Drive.documents): create and read documents and spreadsheets.userinfo.email): identify the user's account.All access is limited to each user's own account. Orion never accesses data from accounts the user has not explicitly authorized.
Data retrieved from Google APIs is used exclusively to fulfill the user's requests (e.g., summarizing emails, scheduling events, searching files). Data is processed in memory and may be cached temporarily on the server to improve response times. No data is sold, shared with advertisers, or used for purposes other than serving the user.
Orion runs on a private server secured with firewall (UFW), intrusion prevention (CrowdSec), and TLS encryption. OAuth tokens are stored encrypted in a PostgreSQL database bound to localhost. The server is not publicly accessible except through authenticated API endpoints.
Users may revoke Orion's access at any time by visiting Google Account Permissions. This immediately invalidates all tokens. Users may also request deletion of any stored data by contacting the administrator.
Orion uses large language model providers (OpenAI, Google, OpenRouter) to process natural language requests. When processing a request, the content (but not OAuth credentials) may be sent to these providers under their respective privacy policies. No raw email content or calendar data is shared with third parties for advertising or analytics.
Orion is not directed at children under 13 and does not knowingly collect data from children.
Updated versions will be published at this URL with a revised date.
Questions: ljvela@gmail.com