BOB
Basic Omnicapable Builder

Privacy Policy

Effective 24 September 2026

BOB is operated by Deane McRobie and Matt Kerr. Contact: [email protected].

Information BOB handles

Google sign-in provides your Google account identifier, verified email address and basic profile information. BOB stores your identifier and email to create and recognize your account. Signing in does not give BOB access to your Gmail, calendars or Drive.

BOB stores the projects, files, skills, preferences, messages, terminal transcripts, browser profiles, schedules and workflows that you create or use. It also keeps device-session records and security audit events. Cloud browser profiles can contain cookies for websites you sign in to.

Optional connections and Google user data

You choose whether to connect each service. Depending on the connection and permissions you grant, BOB can access email messages and metadata, calendar events, files and document contents, spreadsheets, presentations, or task lists. It uses this information to carry out the tasks and automations you request, including reading, summarizing, searching, creating or changing content and sending messages where authorized.

Connection tokens and AI credentials are stored encrypted by BOB so your connections can work across sessions. Task results may be saved in your project, transcripts or operation records. Optional Gemini voice processes audio and text and can access Google Cloud project information to set up its voice service.

AI providers and sharing

When you ask an AI to use your files or connected services, the content needed for that task can be sent to the AI provider you selected. The same applies to tasks you schedule or configure to run automatically. Choose accounts and provider settings appropriate for the information you use. Providers process requests under their own terms and privacy policies.

Other BOB users receive only the project content and messages you choose to share with them. Hosting and network providers, including Hetzner and Cloudflare, process data to operate and protect the service. BOB may disclose information when required by law or necessary to investigate abuse or protect the service.

BOB does not sell Google user data or use it for advertising, credit decisions or training general-purpose AI models. Google's API Services User Data Policy, including its Limited Use requirements, governs BOB's use and transfer of Google API data. Human access to that data is limited to your specific permission, necessary security investigations or legal requirements.

Storage and security

The public service uses HTTPS. BOB separates users' accounts and cloud workspaces and encrypts stored provider credentials. Workspace content is not end-to-end encrypted: the service operators and server administrators have technical access to server data. Cloud processing and third-party providers may operate outside your country.

BOB uses essential sign-in cookies and browser or device storage to remember sessions and preferences. Cloudflare may process IP addresses, browser information and security cookies to deliver and protect the site.

Your choices and deletion

You can disconnect a service in Settings, revoke BOB's access in the provider's account settings, and sign out or revoke remembered BOB devices. Disconnecting removes BOB's active stored connection credentials; it does not erase information already saved in files, transcripts or earlier task records, or delete the provider's own data.

BOB retains account and workspace data while providing your account and until it is removed or you request deletion. Deleting a project does not automatically erase its underlying workspace files and transcripts. Contact us to request access, correction, export or deletion of your account and associated data. We may need to verify your identity. Backups may retain copies until their scheduled replacement, and records needed for security or legal obligations may be retained longer.

Changes and contact

We will update this page when our practices change. Material changes to how Google user data is used will be disclosed and require renewed consent where applicable. Use the contact address above for privacy questions or requests.