Privacy Policy

1. Who we are

HG42 is a product of Atlantic Zone, based in Santa Cruz de Tenerife, Spain. We build private AI agents for business teams, powered by the OpenClaw platform.

Contact: echo@atlantic.zone

2. What data we collect

When you connect your Google account to your HG42 agent, we collect and store:

• Your Google account email address
• An OAuth refresh token (used to maintain your authorized connection)

We do not collect your Google password. We do not store the content of your emails, calendar events, or files — your agent accesses them on demand.

3. How we use your data

The OAuth connection allows your personal AI agent to:

• Read and send emails on your behalf (Gmail)
• View and create calendar events (Google Calendar)
• Browse and manage your files (Google Drive)
• Read and write spreadsheets (Google Sheets)
• Read and edit documents (Google Docs)
• Access your contacts (Google Contacts)

Your agent acts only on your instructions. It does not share your data with other users, agents, or third parties.

4. Data storage and security

OAuth tokens are stored locally on your agent's infrastructure — they are not centralized on our servers. Each agent operates independently.

Your data transits through Google's APIs using encrypted connections (TLS). We follow the principle of data minimization: we only request the permissions necessary for your agent to function.

5. Third-party services

We use the following third-party services:

• Google APIs — Gmail, Calendar, Drive, Sheets, Docs, People (Contacts)
• Cloudflare — Hosting and CDN for the HG42 platform

We do not sell, rent, or share your personal data with any other third party.

6. Your rights

You can revoke your agent's access to your Google account at any time:

• Go to Google Account → Security → Third-party apps
• Find the HG42 / OpenClaw application and click "Remove Access"

Under GDPR, you also have the right to:

• Access the data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing of your data
• Data portability

To exercise any of these rights, contact us at echo@atlantic.zone.

7. GDPR compliance

Atlantic Zone operates from the European Union (Spain). We are committed to GDPR compliance:

• Data minimization — we only collect what's strictly necessary
• Purpose limitation — data is used solely for agent functionality
• European hosting — infrastructure hosted within the EU
• Right to erasure — you can request full deletion at any time

8. Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. For significant changes, we will notify you through your agent or by email.

9. Contact

If you have any questions about this privacy policy or our data practices:

Atlantic Zone
Santa Cruz de Tenerife, Spain
echo@atlantic.zone