Privacy Policy

Effective 7 October 2026

We keep this short and honest. This explains what Gaurify Meet collects, why, who helps us process it, and the choices you have. Gaurify is the data controller for the product. Reach us at hello@gaurifyhq.com.

What we collect

• Account details from a host: name, email, page handle, and a password hash or passkey. We never store a readable password.
• Booking details from a guest: name, email, and any note or answer you add when you book.
• Calendar data, only if a host connects a calendar: busy times to work out availability, and the events we create for bookings. We request the narrowest access that makes this work.
• What you ask Flow: your question and your last few messages, and, when you are signed in, your next 8 meetings (guest name, time and length) so Flow can answer about your day.
• Screenshots you give to Flow, only when you drop one in, to pull out the meeting details and pre-fill the form.
• Basic technical data: IP address and request logs, used for security and rate limiting, kept briefly.

Why we use it

• To run the product: show availability, take bookings, put events on calendars, and send the emails a booking needs.
• To keep the service safe and prevent abuse (rate limits, fraud checks).
• To bill paid plans and issue invoices.
• To reply when you contact us.

We do not sell your data, we do not use your content or a guest's details to train AI models, and we do not run advertising trackers on you.

Our lawful basis

We use your data to provide the service you signed up for. That is our contract with you. WhatsApp messages rely on consent: we send them only to a number given to us for booking messages, and you can stop them any time by replying STOP. For keeping the service safe, we rely on our legitimate interest in preventing abuse.

Google Calendar data (Limited Use)

When you connect your Google Calendar, Gaurify Meet requests the narrowest scopes that make scheduling work: calendar.freebusy and calendar.calendarlist.readonly, to read only your busy times across your calendars and work out when you are free, and calendar.events, to create, update and cancel the specific events for meetings you book. If you turn on Show all events in the Gaurify Meet app, we also use calendar.events to read the times and titles of your own events for the days you are looking at, so you can see them beside your bookings. They are shown only to you, fetched when you look, and never stored, logged or used for anything else. If you drag one of your own events to a new time there, we use calendar.events to change that event's time, and Google lets any guests on it know. Apart from that, we do not read, change, store or use your calendar events.

Gaurify Meet's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google Workspace data only to provide and improve the user-facing scheduling features above. We do not transfer this data to others except as needed to provide the service or as required by law, do not sell it, do not use it for advertising, and do not use it (in raw, aggregated, anonymised or derived form) to develop, improve or train any generalised or foundational AI or machine-learning models. You can disconnect at any time from your account, which revokes our access and stops any further reads or writes.

Who we share Google user data with

We do not sell or rent your data. We share Google user data only with the infrastructure providers that are strictly required to run the product, and only to the extent needed to operate it on your behalf:

• Cloudflare (our application host and database): stores and processes the data that runs Gaurify Meet, including your calendar connection and the events we create for your bookings.
• Google itself, when we call the Google Calendar API on your behalf to read availability and create the meeting.
• Nobody else. Google user data is never shared with our AI features, advertising networks, data brokers, or any third-party AI or analytics provider.

The full list of every provider we use, with what each one does, is on our Sub-processors page.

How we protect your data

We apply security controls suited to sensitive data, including Google user data:

• Encryption in transit: all traffic runs over HTTPS/TLS.
• Encryption at rest: data is stored on encrypted infrastructure at our host.
• Least privilege & access control: access to production data is limited to the people who need it, over authenticated channels; OAuth tokens are encrypted, held only as long as your calendar stays connected, and deleted when you disconnect (encrypted backup copies are deleted within 30 days).
• No secrets in the clear: passwords are stored only as hashes and passkey secrets never leave your device; nobody, including our staff, can read them.
• Data minimisation: we request the narrowest scopes, keep only what a booking needs, and age out short technical logs automatically.

AI features and your data

Gaurify Meet includes an assistant called Flow that answers questions about the product and can help draft a booking from a sentence or a screenshot you choose to share. When you ask Flow something, it receives your question, your last few messages and, if you are signed in, your next 8 meetings (guest name, time and length). Flow and any AI or machine-learning service we use never receive your Google Calendar data, and no Google user data, and no guest's personal data, is ever used to train, fine-tune, or improve any AI model.

• Questions are answered by OpenRouter, which runs Meta's Llama model. We only use OpenRouter providers with Zero Data Retention that never train on prompts. If OpenRouter is down, Cloudflare Workers AI answers instead.
• Screenshots are read by Cloudflare Workers AI.

Each request is used only to return your result. We never sell it, and we never use it to train AI. In the iPhone app, Flow asks before it sends anything, and you can turn it off any time in Settings.

WhatsApp messages

When a phone number is given, we send booking confirmations, reminders and changes on WhatsApp. These go through Meta's WhatsApp Business Cloud API. Meta receives the phone number and the message: names, the meeting time and links. The full list of providers is on our Sub-processors page.

Guests are protected end to end

A guest's details are only ever shown to the host they booked with. A team member sees their team's data. A change to a guest's own name, number, or email is confirmed by that guest through a link or one time code before it takes effect. Nobody, including our staff, can read a password or a passkey secret.

Hosts and their guests

For a guest's booking details, the host is in charge of that data and we process it for them. Our Data Processing Addendum sets out how.

Where your data is stored

Gaurify Meet runs on Cloudflare's global network. Our database and backups are kept with Cloudflare.

How long we keep it

We keep account and booking data while your account is active. When you close your account we delete or anonymise your data within a reasonable period, except where we must keep records (for example, tax and invoice records for the period the law requires). Short technical logs age out on their own.

We keep nightly backups for 30 days, then delete them. So a closed account is gone from our backups within 30 days. Backups never hold sign-in links or sessions, and any calendar token in them is encrypted.

Your rights

Depending on where you live, you can ask to access, correct, export, or delete your data, and to object to certain processing. Email hello@gaurifyhq.com and we will act on it. A guest can also ask the host they booked with, or contact us directly.

Hosts can take a copy of their data any time. Go to Settings > Download my data for one file with your profile, meeting types, bookings and invoices.

International transfers

Our providers may process data in more than one country. Where data leaves your region we rely on the provider's safeguards for lawful transfers.

Children

Gaurify Meet is not meant for children under the age needed to consent in your country. We do not knowingly collect their data.

Changes

If we change this policy in a way that matters, we will tell account holders by email or in the product before it takes effect.

Grievance officer

Under India's data protection law, you can raise a complaint with our Grievance Officer.

We reply to every grievance within 30 days.

Contact

Privacy questions or requests go to hello@gaurifyhq.com. See also our Security page.