Handyva
Start free ›
FeaturesHow it worksUse casesVirtual Assistant in GhanaAI Personal AssistantFor Small BusinessesWhatsApp Business AssistantEmail & Calendar AssistantPricingFor BusinessSign inStart free

Privacy policy

Last updated 12 November 2026

What we collect

Your Telegram ID, name, phone number (shared by you through Telegram), email if you give it, your conversations with Handyva, reminders and notes you ask it to save, and records of your payments.

How we use it

Only to run the service: answer your messages, send reminders, process payments, provide support and keep Handyva secure. Conversations are processed by our AI provider to generate replies. We don't sell your data or use it for advertising.

Connected apps

When you connect an app, you sign in on the provider's own page or paste a key on handyva.com. Handyva uses that access only to do what you ask in the moment (for example summarising your inbox or booking a meeting), shows you anything before it is sent or posted, and you can disconnect at any time from your dashboard or by asking the bot. Access tokens and keys are stored encrypted.

Google user data

Handyva's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail, Google Calendar, Google Drive, YouTube and Business Profile data only to provide the features you request in Handyva. We do not sell it, use it for advertising, or use it to train general AI models, and people at Handyva cannot read it unless you ask us to help with a support request, it is needed for security, or the law requires it.

AI processing. Handyva is an AI assistant. To answer a request, the relevant Google data (for example the titles and times of tomorrow's events) is sent to our AI model provider, Anthropic, which processes it only to produce the reply. Anthropic does not use this data to train its models, and we do not use it to train any AI models either.

Who we share Google user data with. We share Google user data only with these service providers, only as needed to run the features you use, and under contracts that stop them using it for anything else:

  • Anthropic (AI model provider): receives the part of your Google data needed to answer a request, processes it to produce the reply, and deletes it within 30 days, unless it must keep it longer to enforce its usage policy or comply with the law.
  • DigitalOcean (hosting): runs our servers and database, where your encrypted access tokens and conversation history are stored.
  • Cloudflare (network security): carries encrypted traffic between you, Google and our servers.

We do not sell, rent or transfer Google user data to anyone else, including advertisers, data brokers or information resellers. We disclose it only if you ask us to, if it is required by law, to protect against fraud or abuse, or as part of a merger or acquisition where the buyer keeps these same commitments and you are told first.

How we protect it. All data travels over encrypted connections (TLS/HTTPS). Google access and refresh tokens are encrypted with AES-256-GCM before they are stored, and are only decrypted on the server at the moment a request needs them. Our database is not reachable from the internet; our servers accept no incoming connections except key-based administrator login, behind a firewall. Only Handyva's administrator can access production systems, using individual SSH keys. Handyva cannot send an email, create or change a calendar event, or post a reply in your Google account until you have seen a full preview and tapped Send in your own Telegram chat.

How long we keep it, and how to delete it. Handyva fetches Google data live when you ask for something and does not keep copies of your emails, calendar events, Drive files, YouTube data or reviews in its database. What we do keep:

  • Access tokens, until you disconnect. Disconnecting (from your dashboard at handyva.com/dashboard, or by asking the bot) deletes the tokens immediately and revokes Handyva's access with Google. You can also remove access at any time at myaccount.google.com/permissions.
  • Handyva's replies to you, which may summarise or quote Google data you asked about, as part of your conversation history so the assistant can follow the conversation. They are kept while your account is open.

To delete your account and all associated data, including conversation history, email support@handyva.com or send /human to the bot. We delete it within 30 days of your request, apart from payment records we must keep by law.

Microsoft account data

Outlook mail, calendar and OneDrive data accessed through Microsoft Graph is used in the same limited way: only to do what you ask, never sold or used for advertising. You can remove Handyva's access at any time from your dashboard or at account.microsoft.com → Privacy → Apps and services.

Website analytics

Our website counts visits with our own cookie-free counter, which records the page, the referring site, your country and device type, and a daily-changing anonymous code so a visitor is counted once per day, without storing IP addresses. Our public pages also use Google Analytics, which sets cookies to measure visits and which links people click (such as the link to start Handyva on Telegram). Google processes this data under its privacy policy; you can opt out with the Google Analytics opt-out add-on or by blocking cookies. We also use Google Ads conversion tracking on these pages, which uses cookies to tell us when someone who clicked one of our ads goes on to start Handyva. If you arrive from an ad, the website also remembers that ad click in your browser for up to 30 days so we can tell which sign-ups our ads brought in; you can control ad personalisation at adssettings.google.com. Your dashboard and payment pages are not tracked by Google.

Payments

Payments are processed by Paystack. We never see your full card details or your mobile money PIN.

Your choices

To export or delete your data, message the bot with /human or email support@handyva.com. We complete deletion requests within 30 days.