← Back

Privacy Policy

Effective March 11, 2026

Sync ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at sync2meet.org (the "Service"). By accessing or using the Service, you agree to the terms of this Privacy Policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address, display name, and timezone. If you sign in with Google, we receive your name and email from your Google profile.

1.2 Calendar Data

When you connect a third-party calendar (Google Calendar or Microsoft Outlook), we access and store your calendar event data, including event titles, dates, times, locations, descriptions, and attendee information. We also store OAuth access tokens and refresh tokens necessary to maintain the calendar connection.

1.3 Scheduling Data

When you create or participate in scheduling sessions, we collect your availability data, voting preferences, and participation status.

1.4 Contact Submissions

If you contact us through our contact form, we collect your name, email address, and message content.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Synchronize your calendar events between Sync and your connected third-party calendars
  • Compute availability across participants for collaborative scheduling
  • Authenticate your identity and secure your account
  • Respond to your inquiries and support requests
  • Detect, prevent, and address technical issues

We do not use your information for advertising, profiling, or any purpose unrelated to providing the Service.

3. Google API Services Disclosure

Sync's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google Calendar data to provide and improve the calendar synchronization features of the Service. We do not use Google user data for serving advertisements or sell it to third parties.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share limited information in the following circumstances:

  • Scheduling participants: When you join a scheduling session, other participants can view your busy/free status during the proposed time range. They cannot see your event titles, descriptions, or other details.
  • Service providers: We use Google Cloud (Firebase) to host and store data. These providers are bound by their own privacy policies and data processing agreements.
  • Legal requirements: We may disclose your information if required to do so by law or in response to valid legal process.

5. Data Storage and Security

Your data is stored in Google Cloud Firestore. We implement appropriate technical and organizational measures to protect your personal information, including:

  • All data is encrypted in transit (TLS/SSL) and at rest
  • API routes require authenticated requests verified via Firebase Authentication tokens
  • OAuth tokens are stored server-side and are never exposed to other users
  • Database security rules restrict access to authorized users only

While we strive to use commercially acceptable means to protect your information, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Calendar event data is retained to maintain synchronization with your connected calendars. If you disconnect a calendar, the associated OAuth tokens are removed. If you request account deletion, we will delete all associated personal data within 30 days.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate personal data
  • Deletion: Request deletion of your personal data and account
  • Revocation: Disconnect third-party calendar integrations at any time from the application settings

To exercise any of these rights, please contact us using the contact form available on the Service.

8. Third-Party Services

The Service integrates with third-party services including Google Calendar and Microsoft Outlook. Your use of these integrations is subject to the respective privacy policies of Google and Microsoft. We encourage you to review their policies.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Effective Date" at the top of this page. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us through the contact form available on the Service.