PRIVACY POLICY

9. GOOGLE CALENDAR INTEGRATION

SalesChat offers an optional integration with Google Calendar to support appointment scheduling and calendar synchronization. An authorized administrator of a SalesChat organization may choose whether to connect a Google account and which supported calendar or calendars to use with SalesChat.

GOOGLE CALENDAR PERMISSIONS

When an organization connects Google Calendar, SalesChat requests only the Google OAuth permissions required to provide the enabled calendar functionality.

SalesChat may request permission to:

The Google Calendar OAuth permissions currently requested by SalesChat are:
https://www.googleapis.com/auth/calendar.calendarlist.readonly — to list available calendars for calendar selection;
https://www.googleapis.com/auth/calendar.freebusy — to determine calendar availability without reading underlying event contents; and
https://www.googleapis.com/auth/calendar.events — to create, update, reschedule, and cancel appointment events.

• list calendars available to the connected Google account so an authorized administrator can select the calendar or calendars used with SalesChat;

• query calendar availability through Google Calendar FreeBusy information so SalesChat can determine which appointment times are available; and

• create, update, reschedule, and cancel Google Calendar events associated with appointments managed through SalesChat.

SalesChat does not request access to Gmail, Google Drive, Google Contacts, Google Sheets, or other unrelated Google services as part of the Google Calendar integration.

CALENDAR INFORMATION

When an administrator selects a Google Calendar for use with SalesChat, SalesChat may receive and store information necessary to identify and configure the selected calendar, including:

• the Google Calendar identifier;
• the calendar display name;
• whether the calendar is designated as primary;
• the calendar timezone; and
• integration configuration necessary to operate the connection.

SalesChat does not need to persist the organization's complete Google Calendar list after the relevant calendar configuration has been selected.

AVAILABILITY INFORMATION

When appointment availability is requested, SalesChat may query Google's FreeBusy API.

FreeBusy information identifies time intervals during which the selected calendar is unavailable. It does not provide SalesChat with the title, description, attendees, or other contents of the underlying events.

SalesChat uses this availability information to calculate appointment slots. Raw FreeBusy busy intervals are used transiently for availability calculations and are not persistently stored as calendar event records in SalesChat.

When artificial intelligence functionality is used for conversational booking, an AI agent may receive available appointment slots calculated by SalesChat from calendar availability information. SalesChat does not provide the AI model with raw FreeBusy intervals or the contents of unrelated Google Calendar events for this purpose.

APPOINTMENT EVENTS

When an appointment is booked through SalesChat, SalesChat may create a corresponding event on the selected Google Calendar.

Depending on the organization's booking configuration, information transmitted to Google may include:

• appointment date and time;
• event title;
• event description;
• appointment-related information configured by the organization; and
• the contact's email address when the organization chooses to send a calendar invitation.

SalesChat may subsequently update the corresponding Google Calendar event when an appointment is rescheduled and may cancel or delete the event when the appointment is cancelled.

SalesChat stores the Google Calendar event identifier associated with a SalesChat booking so that the corresponding event can be updated or cancelled when necessary.

GOOGLE OAUTH CREDENTIALS

To maintain an authorized Google Calendar connection, SalesChat stores OAuth credentials issued by Google, which may include an access token and refresh token, together with information such as granted scopes, expiration information, and connection metadata.

Google OAuth credentials stored by SalesChat are encrypted at rest using AES-256-GCM authenticated encryption.

OAuth credentials are handled server-side and are not intentionally returned to the SalesChat browser application, displayed to end users, or included in ordinary application logs.

HOW GOOGLE CALENDAR INFORMATION IS USED

SalesChat uses information obtained through Google Calendar APIs only as necessary to provide and support user-facing calendar and appointment functionality requested by the organization.

This may include:

• selecting calendars;
• calculating appointment availability;
• creating appointment events;
• updating or rescheduling appointment events;
• cancelling appointment events;
• synchronizing relevant booking state; and
• troubleshooting and securing the authorized integration.

SalesChat does not sell Google Calendar data or use Google Calendar data for advertising, behavioral advertising, data brokering, creditworthiness determinations, or unrelated marketing profiling.

GOOGLE CALENDAR AND ARTIFICIAL INTELLIGENCE

SalesChat may use artificial intelligence providers when an organization enables AI-powered conversational functionality.

For conversational booking, SalesChat may provide an AI agent with appointment availability calculated by SalesChat, including available appointment times and related display information needed to communicate scheduling options to the customer.

SalesChat does not intentionally provide AI providers with Google OAuth credentials, raw FreeBusy busy intervals, or the contents of unrelated Google Calendar events as part of this process.

Information processed by AI providers remains subject to the organization's enabled SalesChat functionality, configuration, and the applicable provider arrangements described elsewhere in this Privacy Policy.

GOOGLE API SERVICES USER DATA POLICY

SalesChat's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements where applicable.

Information obtained through Google APIs is used only to provide or support user-facing functionality described in this Privacy Policy.

SalesChat does not sell Google user data, use Google user data for advertising, or use Google user data to train generalized artificial intelligence or machine-learning models.

Google user data may be processed by infrastructure or service providers acting on behalf of SalesChat where reasonably necessary to operate, secure, and provide the service, subject to appropriate data-protection and confidentiality obligations.

Human access to Google user data is restricted and occurs only when reasonably necessary for security, support, legal compliance, or other circumstances permitted under applicable Google API policies.

DISCONNECTING GOOGLE CALENDAR

An authorized organization administrator may disconnect Google Calendar through SalesChat at any time.

When Google Calendar is disconnected, SalesChat attempts to revoke the applicable Google OAuth authorization through Google's token revocation mechanism and permanently removes the locally stored OAuth credentials associated with the connection.

Local credentials are removed even if Google's revocation service is temporarily unavailable or the applicable Google token has already been invalidated or revoked.

After disconnection, SalesChat can no longer use the removed credentials to make authorized Google Calendar API requests for that connection.

Historical SalesChat booking records created while the integration was active may remain in SalesChat in accordance with this Privacy Policy. Such records may retain technical identifiers associated with previously created Google Calendar events, but those identifiers do not independently authorize SalesChat to access the user's Google Calendar.

An administrator may subsequently reconnect Google Calendar by completing a new authorized OAuth flow.

ADMINISTRATOR CONTROL

Connecting Google Calendar is optional.
Authorized organization administrators control whether the integration is connected, which supported calendar configuration is used, and whether the integration remains active.

10. CONTACTS AND CONVERSATION HISTORY

SalesChat may maintain contact and conversation records for businesses using the service.

Depending on the connected communication channel and the organization's configuration, these records may include:

• contact identifiers;
• phone numbers or other channel-specific identifiers;
• display names when available;
• manually entered contact information;
• custom fields configured by the business;
• conversation status;
• assigned user or team;
• inbound messages;
• outbound messages;
• message timestamps;
• message delivery status;
• channel information;
• conversation workflow status.

Conversation history is maintained so businesses can manage ongoing customer relationships, provide customer service, maintain context, and have continuity when responding to customers.

11. ARTIFICIAL INTELLIGENCE PROCESSING

SalesChat includes optional artificial intelligence capabilities.

When an organization enables and explicitly uses supported AI functionality, SalesChat may transmit relevant information to the AI provider configured for that organization in order to generate a response or perform the requested AI operation.

Information transmitted may include:

• conversation message text;
• relevant recent conversation history;
• conversational agent instructions;
• tool names and descriptions;
• contextual information;
• configuration required to generate the requested response.

SalesChat currently supports real AI execution through OpenAI for implemented AI workflows.

SalesChat may support additional AI providers in the future.

Organizations may also be permitted to configure their own supported AI provider credentials.

SalesChat does not automatically transmit every conversation to an AI provider merely because a communication channel is connected.

AI processing depends on the functionality enabled and used by the organization.

Where organizations provide their own supported AI provider credentials, those credentials are handled separately from ordinary conversation data and are protected using appropriate credential-security controls.

12. AUTHENTICATION INFORMATION

SalesChat uses Clerk as an authentication and identity-management provider.

Clerk may process information required to:

• authenticate users;
• provide supported social login functionality;
• maintain login sessions;
• verify email addresses;
• protect accounts from unauthorized access.

SalesChat uses Clerk for identity and authentication.

SalesChat maintains its own organization, membership, role, permission, and tenant-isolation system and does not rely solely on Clerk to determine ownership of customer data.