Privacy Policy

1. Introduction

Welcome to AskAlly. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our AI-powered meeting scheduling assistant.

By using AskAlly, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, and password when you create an account
• Profile Information: Timezone preferences and other profile settings
• Contact Information: Names and contact details of people you interact with through WhatsApp or Telegram

2.2 Google Account Data

When you connect your Google account, we request access to the following data:

• Google Calendar: We access your calendar events to help you schedule meetings, check availability, and manage your schedule. This includes event titles, times, locations, attendees, and descriptions.
• Google Contacts: We access your Google Contacts in read-only mode to help you find and schedule meetings with people in your contact list. This includes contact names, email addresses, and phone numbers.
• Basic Profile Information: Your name and email address from your Google account for authentication purposes.
• OAuth Tokens: Access and refresh tokens that allow us to interact with your Google Calendar and Contacts on your behalf.

2.3 Messaging Platform Data

• WhatsApp: Your WhatsApp ID, phone number, and messages you send to our service
• Telegram: Your Telegram ID and messages you send to our service

2.4 Automatically Collected Information

• Usage data and interaction patterns with our service
• Technical information such as IP address, browser type, and device information
• Log data including timestamps and error messages

3. How We Use Your Information

We use your information solely to provide and improve our scheduling assistant service:

• Calendar Management: Create, view, update, and delete calendar events on your behalf
• Availability Checking: Check your free/busy times to suggest meeting slots
• Meeting Coordination: Send meeting invitations and notifications to attendees via email (through Google Calendar) or messaging platforms
• Natural Language Processing: Process your messages to understand scheduling requests and respond appropriately
• Contact Management: Store and search your contacts to help you schedule meetings with the right people
• Service Improvement: Analyze usage patterns to improve our AI assistant's accuracy and features
• Authentication: Verify your identity and maintain your session
• Communication: Send you service-related notifications and updates

4. Google API Services User Data Policy Compliance

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Limited Use Disclosure

AskAlly's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we:

• Only use Google Calendar data to provide scheduling features visible in our user interface
• Do not transfer Google user data to third parties except as necessary to provide our service
• Do not use Google user data for serving advertisements
• Do not allow humans to read your Google Calendar data except when necessary for security purposes or with your explicit consent
• Do not use Google user data to determine creditworthiness or for lending purposes

5. How We Store and Protect Your Data

5.1 Data Storage

• Database: Your account information, contacts, and OAuth tokens are stored in a secure PostgreSQL database
• Encryption: OAuth tokens and sensitive data are encrypted at rest
• Calendar Events: We do not permanently store your calendar events. They are fetched from Google Calendar on-demand when needed
• Message History: Recent conversation history is stored temporarily to provide context for our AI assistant

5.2 Security Measures

• Industry-standard encryption for data in transit (HTTPS)
• Secure authentication using OAuth 2.0
• Regular security updates and monitoring
• Access controls and authentication requirements
• Automatic token refresh to maintain secure connections

6. Data Sharing and Third Parties

We do not sell, trade, or rent your personal information to third parties. We only share data in the following limited circumstances:

• Service Providers: We use trusted third-party services to operate our platform:
  • Google Calendar API (to access your calendar on your behalf)
  • WhatsApp Cloud API (to send and receive messages)
  • Telegram Bot API (to send and receive messages)
  • OpenAI API (to power our AI assistant)
  • Cloud hosting providers (for infrastructure)
• Legal Requirements: We may disclose information if required by law or to protect our rights and safety
• With Your Consent: We may share information with your explicit permission

We do NOT:

• Sell your data to advertisers or data brokers
• Use your data for advertising purposes
• Share your calendar data with other users
• Transfer your data to third parties for their own purposes

7. Data Retention

• Account Data: We retain your account information and OAuth tokens as long as your account is active
• Message History: Conversation history is retained for up to 30 days to provide context for our AI assistant
• Contacts: Contact information is retained until you delete your account or remove specific contacts
• Logs: System logs are retained for security and debugging purposes for up to 90 days

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

8. Your Rights and Choices

You have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct your personal information through your account settings
• Deletion: Delete your account and associated data at any time
• Revoke Access: Disconnect your Google account at any time through your Google Account settings
• Data Portability: Request an export of your data in a machine-readable format
• Opt-out: Stop using our service at any time

To exercise these rights, please contact us at the email address provided in the Contact section below.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze usage patterns to improve our service

You can control cookies through your browser settings, but disabling cookies may affect the functionality of our service.

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

13. Scope-Specific Disclosures

For transparency, here are the specific Google API scopes we request and how we use them: