Privacy Policy

Last updated: October 05, 2025

Introduction

At CalChat, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our calendar chat assistant service.

Information We Collect

We collect information that you provide directly to us, including:

  • Google account information (email, name, profile picture)
  • Calendar data through Google Calendar API
  • Chat messages and interactions with our service

How We Use Your Information

We use the collected information to:

  • Provide and maintain our service
  • Process your calendar queries and requests
  • Improve and personalize your experience
  • Communicate with you about our service

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties. Your Google user data is only shared in the following limited circumstances:

  • Service Providers: We may share your data with OpenAI (ChatGPT API) to process your calendar queries and generate responses. This data is processed according to their privacy policy and is not used to train their models.
  • Legal Requirements: We may disclose your information if required by law, court order, or governmental request.
  • Security: We may share information to investigate, prevent, or take action regarding illegal activities, suspected fraud, or violations of our terms.

Important: Your calendar data is never shared with other users or used for marketing purposes. We only access your Google Calendar data to fulfill your specific requests through our AI assistant.

Data Retention and Deletion

We retain your information only as long as necessary to provide our services and fulfill the purposes outlined in this policy:

  • Account Data: Your Google account information (email, name, profile) is retained while your account is active.
  • Calendar Data: Calendar information is only accessed in real-time to process your requests and is not permanently stored on our servers.
  • Chat History: Your chat messages with our AI assistant are retained for 30 days to improve service quality, then automatically deleted.
  • Access Tokens: Google OAuth tokens are stored securely and automatically refreshed. These are deleted when you revoke access.

Your Rights: You can request deletion of your data at any time by:

  • Revoking access to your Google Calendar in your Google Account settings
  • Contacting us directly at info@calchat.in
  • Deleting your CalChat account through our platform

When you delete your account or revoke access, we will delete your personal information within 30 days, except where retention is required by law.

Google API Data Usage

CalChat's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only request the minimum scopes necessary for our service to function
  • Your Google Calendar data is used solely to fulfill your requests through our AI assistant
  • We do not use your Google data for advertising or marketing purposes
  • Your data is not transferred to third parties except as outlined in this policy
  • We download your calendar data to process your requests, we do not share it with anyone

Data Security and Protection Measures

We implement comprehensive security measures to protect your sensitive information, particularly your Google Calendar data and personal information:

  • Encryption in Transit: All data transmission between your device and our servers uses TLS/SSL encryption (HTTPS)
  • Encryption at Rest: Sensitive data stored in our database is encrypted using industry-standard encryption algorithms
  • OAuth Token Security: Google access tokens are stored encrypted and automatically expire/refresh according to Google's security protocols
  • Secure API Communications: All Google Calendar API requests use OAuth 2.0 authentication and HTTPS encryption
  • Database Security: Our database servers are secured with firewalls, access controls, and regular security updates
  • Access Control: Only authorized personnel have access to systems containing user data, with strict authentication requirements
  • Data Minimization: We only collect and process the minimum data necessary for our service to function
  • Regular Security Audits: We conduct regular security assessments and updates to maintain protection standards

Google Calendar Data Protection: Your calendar information is processed in real-time and is not permanently stored on our servers. When temporary processing is required, data is encrypted and automatically purged after processing is complete.

While we implement robust security measures, no method of transmission over the Internet is 100% secure. We continuously monitor and update our security practices to protect your information.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: info@calchat.in