Privacy policy

1. Who is responsible for your data

This website at consult.fisher.tech, and the Fisher Tech AI assistant described on it, are operated by LIMITED LIABILITY COMPANY “Fisher Tech”, registered in Ukraine under registration code (ЄДРПОУ) 46111523, registered address 89320, Zakarpattia region, Mukachevo district, village of Holubyne, building 695. Below we call it “we”, “us” or “Fisher Tech”.

For any question about this policy, or to exercise any of the rights described in it, write to admin@fisher.tech.

2. This website

The website itself collects no personal data about you. There is no account, no sign-up and no server-side form: the contact form on this site simply opens your own mail client with the text pre-filled, and nothing leaves your device until you press send in your own mail program.

This site does not run advertising trackers and does not set cookies for advertising or analytics. Fonts and images are served from this site's own domain, so loading a page does not make a request to any third party.

The only thing stored in your browser is your light or dark theme preference, kept in local storage on your own device. It never reaches us and is not used to identify you.

If you email us, we hold that correspondence for as long as needed to answer you and to keep a record of our business dealings, and no longer.

3. Google user data

This section describes how the Fisher Tech AI assistant (“the assistant”) handles data from your Google Account. It applies only if you explicitly connect a Google Account to your assistant. Without that connection we receive no Google data at all.

3.1. What we access, and why

When you connect Google Drive, the assistant requests a single OAuth scope: https://www.googleapis.com/auth/drive.file.

This scope is deliberately narrow. It grants access only to files and folders that the assistant itself creates, and to items you explicitly select and hand to it. It does not allow the assistant to browse, search or read the rest of your Drive, and we do not request a scope that would.

We use this access solely to perform the tasks you ask of the assistant in your own conversation with it: for example, to place a document it generated into a folder on your Drive, to append rows to a spreadsheet, or to retrieve a file you pointed it to.

3.2. What we store

We store the OAuth refresh token issued by Google. It is encrypted at rest and decrypted only at the moment your assistant's configuration is assembled. Short-lived access tokens exist only in the memory of the running connector process and are never written to disk.

We do not store copies of your Drive files. File contents pass through the assistant while it works on your request and are not retained by us afterwards.

3.3. Who else sees it

To answer your requests, the assistant sends the text it is working with to the large language model provider that powers it, for example Anthropic. Where a document's contents are part of your request, those contents are transmitted to that provider for processing. We use these providers under terms that prohibit using such data to train their models.

We do not sell Google user data, do not use it for advertising, and do not use it to train or improve generalized artificial intelligence or machine learning models.

Our own staff cannot read the contents of your conversations or documents by default: administrative interfaces show metadata only. Access to content requires an explicit, time-limited, recorded authorization, granted only where necessary for support you have requested, for security, or where legally required.

On self-hosted (“sovereign”) deployments, the assistant runs on infrastructure you control, and file contents travel from your own machine directly to Google and to the model provider without passing through Fisher Tech servers.

3.4. Limited Use

Fisher Tech LLC's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

3.5. Keeping control, and taking it back

You can revoke the assistant's access at any time from your Google Account's security settings, at https://myaccount.google.com/permissions. Revocation takes effect immediately and the assistant loses all Drive access.

You can also ask us to disconnect the integration. We delete the stored refresh token when the connection is removed or when your account with us is closed.

4. Legal basis and your rights

Where we process personal data, we do so to perform a contract with you or to take steps at your request before entering one, to comply with legal obligations, or on the basis of your consent, which you may withdraw at any time.

You have the right to ask what personal data of yours we hold, to have it corrected, to have it deleted, to object to or restrict its processing, and to receive a copy of it. Write to admin@fisher.tech and we will answer within thirty days.

If you believe we have handled your data unlawfully, you may complain to the Ukrainian Parliament Commissioner for Human Rights, or to your local supervisory authority if you are in the EU or the UK.

5. Changes to this policy

We may update this policy. The version published on this page is the one in force, and the date above shows when it was last changed. Where a change materially affects how we handle data you have already entrusted to us, we will tell you before it takes effect.