Operator
Doer and doer.lagaryan.click are operated by Aryan Gupta and Aditya Mayank Sinha in India. The Microsoft Store publisher display name is Baandra. Privacy and support requests: aryan@lagaryan.click. Doer is an independent fork of MIT-licensed T3 Code. T3 Tools, Inc. is the upstream copyright holder, not Doer's operator.
Analytics
Doer enables product analytics by default using PostHog's US cloud service. Events include feature usage, provider and model, app version, platform, architecture, turn status and duration, token totals and error reports. An installation or browser identifier associates events with the same installation. Analytics event code does not intentionally include prompts, AI responses, file contents or authentication tokens.
The browser SDK also records interactions, page views, errors and session recordings. Form inputs are masked and query strings and fragments are removed from recorded page URLs. Other rendered content, including task or file content visible on screen, can appear in recordings. Recordings are not limited to anonymous aggregate statistics.
Set T3CODE_TELEMETRY_ENABLED=false in the host's environment before starting Doer to disable server and browser analytics. The browser SDK also honors Do Not Track. Hosts may configure a different PostHog service and are responsible for that configuration. Analytics is used to understand usage and investigate problems, not to sell information or target advertising.
Tasks and local files
Task messages, attachments, settings, history, and connected-tool results are stored on the computer running your Doer server. A remote device connects to that computer; it does not move the task into a Doer-operated cloud account. People and devices you pair with your server may access its tasks and enabled tools, so pair only devices you trust.
Spreadsheet and presentation tools read and edit files in a Space you select. They do not require a Microsoft account or connect to Microsoft 365. Before replacing a document, Doer saves an original copy in that Space's .doer-backups folder. File contents used in a task may be transmitted to the AI provider you select.
Google and Gmail
Gmail is optional. When you connect it, Google handles sign-in in your browser. Doer receives your Google email address to identify the connected account and OAuth access and refresh tokens to search and read mail and perform changes you approve. Doer does not receive your Google password.
Doer requests openid, email, gmail.send, and gmail.modify. These permissions allow reading, sending and organizing mail. Tasks can access message headers, snippets, bodies, attachment names and labels through Gmail's API. Reading does not mark mail read. Before each send, Doer displays the sending account, recipients, subject, and body for approval. Before organizing a message, it displays the account, message and exact action for approval. Organization includes existing labels, archive/inbox, read/unread, stars and Trash/restore. The tool does not permanently delete messages, download attachments, create labels or edit drafts. Gmail receives approved messages and mailbox changes.
Gmail tokens are encrypted on the host computer. The desktop encryption key is protected by the operating system's credential storage. Other host setups must supply a securely managed encryption key; sign-in is disabled when secure storage is unavailable. Tokens are used only to maintain the connection and access the enabled Gmail tools, and are not supplied to model providers by the connector.
Doer's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is not sold, used for advertising, or used by Doer to train general-purpose AI models. The operator does not routinely access your connected Google account or its local tokens.
AI providers and sharing
Your selected provider may receive your prompts, file contents, tool results, and conversation context as needed for the task. Gmail search results and message contents used in a task may be transmitted to that provider and retained in local task history. Providers receive mail through enabled tool results, not direct access to Gmail tokens. Review the provider's privacy, retention, and data-use terms before using sensitive information. Use Google data only with provider settings and agreements that meet Google's Limited Use requirements, including restrictions on general-purpose model training.
Doer does not automatically upload your local task database or Gmail credentials to its operator. If you submit a support request, you choose what to share. Please remove passwords, tokens, and sensitive task content from logs and examples. Information you provide for support is used to respond, investigate the reported issue, and meet applicable legal obligations.
Software downloads and updates use GitHub and npm. Connections to Google, your chosen providers, and services you enable are governed by those services' policies. Operators of servers you choose to connect to are responsible for their own hosting and data practices.
Retention and deletion
PostHog events and recordings follow the analytics project's configured retention settings. Contact us for applicable retention details or to request deletion of information associated with your installation. Disabling analytics stops future collection; it does not delete existing events or recordings. Support information is kept as needed to handle the request and legal obligations.
Gmail credentials remain on the host until you disconnect or remove them. Disconnect attempts to revoke Google access before deleting the local credentials. If revocation fails, Doer reports the failure and keeps the credentials so you can retry. You can also revoke access directly in your Google account's third-party connections.
Disconnecting Gmail does not delete task history, email review records, document backups, or mail already delivered to Gmail or recipients. Local history and backups remain until you delete them; operating-system backups may retain copies. Provider and recipient copies follow their own retention rules. Uninstalling the app may leave local application data.
Website and support
Our website hosting and delivery services process technical information such as IP addresses and HTTP request details to serve the site and maintain security. Contacting us by email shares your address and the contents you send. Doer does not require a separate Doer cloud account to use local tasks.
Your choices
You can leave any integration switched off, choose a different AI provider, disconnect Gmail, remove paired devices, and delete local task data and document backups. Switching Gmail off stops new Gmail tool calls in that Space but keeps the Google connection until you disconnect it. For access, correction, or deletion of information you have sent to the operator, contact the email above. Rights and exceptions depend on applicable law.
Doer is intended for general work and personal tasks, not for children under 13. Do not submit children's personal information to the operator.
Changes and contact
We will update this policy when data practices change and change the date above. New uses of Google data require updated disclosure and consent before use. Questions can be sent to aryan@lagaryan.click.