Taha's Operator, last updated 4 November 2026.
Taha's Operator is the private personal assistant of Taha Karsli ("we" below). It is not a public service; it is used only by Taha and by people he personally invites. This page says what it does with your data, including data from your Google account.
Only what you connect yourself, and only to run the assistant for you. From Google: your Google Calendar, read-only, so the assistant knows your day; your Gmail, read-only; and your Google account's fixed ID (a number, not your name or email address), so it can tell your account from another one. Your Gmail is read for two separate things. To-dos from your mail: it reads your Inbox and Sent mail so mail can become suggested to-dos and reminders, for example an order, a booking or something you promised in a mail you sent; this runs only once you turn on "To-dos from your mail" in the app, and stops reading new mail when you turn it off; what it already read stays at most 30 days, and Disconnect deletes it at once. Connecting Gmail on the app's email page turns it on too, with the same yes as the email check below; connecting it from Settings does not. This is separate from the email check: if you allow it when you connect Gmail on the app's email page (or later in Settings), it suggests the services you use most, and for that it searches the last year of your mail only for mail from the companies on its list (such as airlines, ride, delivery and stay services and shops), never from personal addresses, and keeps only how often each one wrote to you, the month of the newest mail and, for an airline or hotel service, whether its loyalty programme's own address wrote to you. It never sends, deletes, labels or changes any mail, and does not change anything in your Google account. From a mail it reads for to-dos, it keeps only what it needs: the sender, the subject, the date and short facts read from it (such as an order number, a date or an amount), never the whole mail or its attachments; the text of a mail is never treated as an instruction, and nothing it reads in a mail makes the assistant pay, book, send or call without your own tap. If the assistant later asks for more Google access, this page will say so before that access is requested.
Your Google data is used only to provide the assistant's features to you. It is never sold, never used for advertising, and never used to build profiles for anyone else. We do not use it to develop, improve or train generalized artificial intelligence or machine learning models. No person reads your Google data unless you give explicit permission, it is needed for security (for example, investigating abuse), or the law requires it.
It is shared only with the service providers that run the assistant, each acting for us only to provide it: Cloudflare (hosting and storage), Anthropic (the Claude API, which writes the assistant's answers and does not train on what it is sent; the short facts are picked out of a mail by the assistant's own code, and Anthropic sees what was kept from a mail only when something you asked for uses it) and ElevenLabs (voice and phone calls, which receive only what a call you asked for or scheduled needs to say). It is not shared with anyone else, except where the law requires it.
What the assistant keeps is stored in Cloudflare, only as long as it needs it to run the assistant for you; its records are in Cloudflare's D1 database, which Cloudflare encrypts at rest (AES-256). Your sign-ins to the services you connect, your Google sign-in tokens among them, are also encrypted under the assistant's own key (AES-256-GCM, with the key held only as a secret of the service), and every connection to the service uses HTTPS. These pages set no cookies and run no scripts or trackers.
You can remove the assistant's access to your Google account at any time in the app (Settings, Connections, Disconnect, which also deletes what it read from Google) or at myaccount.google.com/permissions; it then stops reading at once. To ask what we hold about you, or for your tokens and everything read from Google to be deleted, email operator@tahakarsli.com; we delete it within 30 days of your request.
Taha's Operator's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
If this policy changes, this page changes with it and shows the new date. Questions: operator@tahakarsli.com.