Privacy Policy

1. Information we collect

We collect only the information needed to provide the App:

• Google account information. When you sign in with Google, we receive your email address and a Google account identifier through our authentication provider.
• Google Calendar data (read-only). With your permission, we access your calendar using the calendar.readonly scope. This includes event titles, descriptions, start and end times, attendee and organizer email addresses, and your RSVP status. We never create, edit, or delete calendar events.
• Settings you provide. Configuration such as your internal email domains and the analysis groups and keywords you define.

2. How we use your information

We use your information solely to provide the App’s features:

• Categorize your meetings into the analysis groups you define, based on keywords and filters.
• Calculate how you spend time in meetings, including total meeting time, internal versus external breakdowns, per-group totals, and weekly trends.
• Display these results to you on your dashboard.

We do not use your information for advertising, and we do not use it to build profiles for any purpose unrelated to the App.

3. Google API Services — Limited Use

Calendar Analysis’s use and transfer of information received from Google APIs to any other application will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer or sell Google user data to third parties, and we do not use it for serving advertisements.

4. How we store and protect your information

• Data is stored in a managed Postgres database provided by Supabase, and the App is hosted on Vercel.
• Your Google refresh token is encrypted at rest before being stored, so it cannot be read directly from the database.
• All data is transmitted over encrypted HTTPS connections.
• Access to the underlying systems is restricted to the App operator.

5. How we share your information

We do not sell, rent, or trade your information. We do not transfer Google user data to third parties except as necessary to operate the App through the following service providers (sub-processors), which process data on our behalf:

• Google — provides authentication and the Calendar API.
• Supabase — provides authentication and database hosting.
• Vercel — provides application hosting.

We may also disclose information if required to do so by law.

6. Data retention

We retain your information only while your account is active. When you delete your account or revoke the App’s access to your Google Calendar, we delete your associated data, including your stored calendar data and encrypted Google credentials.

7. Your rights and choices

• Revoke access at any time from your Google Account security settings at myaccount.google.com/permissions.
• Access or delete your data. You can request access to, correction of, or deletion of your data by contacting us.
• If you are located in the European Union, you have rights under the General Data Protection Regulation (GDPR), including the rights of access, rectification, erasure, restriction, and portability, and the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, email galliotmalo0@gmail.com.

8. Data controller and international users

The data controller is Malo Galliot (France). By using the App, you understand that your information may be processed by the service providers listed above, which may operate in other countries.

9. Children's privacy

The App is not directed to children and is not intended for use by anyone under the age of 16. We do not knowingly collect information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Significant changes will be communicated through the App.

11. Contact us

For any questions about this Privacy Policy or your data, contact Malo Galliot at galliotmalo0@gmail.com.