Privacy notice

Updated 14 October 2026

This notice describes the Google integration used by the private CZAR Personal Assistant deployment, operated for CZAR Advisory and maintained by Level Innovations.

Information accessed

With the account owner's authorisation, CZAR accesses Google Calendar event details such as titles, descriptions, dates, times, locations, participants and reminders. It uses this information to answer scheduling questions, prepare briefings and make calendar changes requested by the owner.

The Google connection can also include Gmail, Drive, Docs, Sheets and contact permissions if granted by the owner. Those services are separate from Calendar and may not be enabled. Their information is accessed only when used for an authorised assistant task.

How information is processed

Google returns requested information to the CZAR server hosted by Domains.co.za. Information included in assistant requests may be processed through OpenRouter and the configured AI model provider to generate responses. Messages and requested summaries are delivered through WhatsApp and its service providers. Those providers apply their own service terms and privacy policies and may process information outside South Africa.

Google-derived information is used for the owner's requested assistant features, rather than advertising, resale or creating general-purpose training datasets. Operation of this integration is intended to follow the Google API Services User Data Policy, including its Limited Use requirements.

Storage and retention

Calendar records remain in Google Calendar until the owner or an authorised application changes or deletes them. CZAR stores Google authorisation credentials on its server to maintain the approved connection. Relevant information may also remain in assistant conversations, summaries, memory, operational logs and backups. Retention in Google, WhatsApp and AI providers' systems is governed by their respective policies.

Access and control

The owner can revoke CZAR's access in Google Account settings, request removal of locally stored authorisation credentials, or request deletion of assistant records through the existing CZAR administrator. Revoking access stops future Google requests but does not automatically delete previous messages or backups. Calendar writes require an instruction or approval from the owner.

Security and administration

Google sign-in takes place on Google's own pages. The server stores the authorisation credentials needed to call Google APIs. Access is restricted to the account owner and authorised administrators and service providers involved in the requested tasks. No online service can guarantee uninterrupted availability or eliminate all security risks.

Questions and requests

Contact CZAR Advisory or your Level Innovations administrator through your existing support channel. Company contact information is available at nexoraadvisory.co.za.