Privacy Policy

1. Introduction

Welcome to AutoCal. This Privacy Policy describes how we collect, use, and handle your information when you use our website, software, and services ("Services"). By using AutoCal, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

• Account Information: When you sign up using Google OAuth, we receive your name, email address, and profile picture.
• Uploaded Content: Images of timetables or schedules you upload for AI processing. These are processed temporarily to extract event data and are not used to train our AI models unless explicitly consented.
• Usage Data: Information about how you use the application, such as features accessed and time spent on the platform.

3. Google API Services Disclosure

AutoCal's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google OAuth Scopes We Request

• userinfo.email / userinfo.profile — Used to authenticate your account and personalize your dashboard display.
• calendar.events or calendar — Allows AutoCal to read, create, and manage calendar events. This is strictly required to sync your extracted timetable schedules directly into your Google Calendar.

How Your Google Data is Protected

• Secure Storage: OAuth tokens are encrypted at rest and never exposed client-side.
• Minimal Usage: We strictly limit our access. We only access your Google Calendar to create the specific events generated by your timetable uploads. We do not read, process, or modify existing personal events unrelated to AutoCal.
• No Third-Party Sharing: We never share, sell, or transfer your Google user data to third parties for advertising, profiling, or unrelated purposes.
• Revoking Access: You can permanently revoke AutoCal's access to your Google Calendar at any time from your Google Account Permissions page.

4. Data Security & Retention

We implement industry-standard security measures to protect your data. Uploaded images are processed and promptly deleted from our servers once the calendar events are generated. OAuth tokens are retained only as long as your account remains connected and active.