Privacy Policy

Last updated: June 25, 2026

AppointedAI ("we," "us," or "our") operates the website appointedai.app and provides AI-powered appointment scheduling services (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

1. Information We Collect

We collect information you provide directly to us when you:

• Sign up for our Service (name, email address, business name, phone number, business address)
• Connect your Google Calendar (calendar availability data, event details needed for scheduling)
• Interact with the AI chat widget (conversation content, appointment preferences)
• Contact us via our website or email

We also collect limited technical data automatically, including IP addresses, browser type, and pages visited, for security and service improvement purposes.

2. Google Calendar Data

With your explicit authorization, our Service accesses your Google Calendar to:

• Read your calendar availability to avoid scheduling conflicts
• Create new appointment events on your behalf when a booking is confirmed

We access only the calendar data necessary to provide scheduling functionality. We do not sell, share, or use your Google Calendar data for advertising or any purpose beyond operating the scheduling features you have enabled. You may revoke this access at any time through your Google account settings at myaccount.google.com/permissions.

Our use of Google Calendar data complies with the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve our appointment scheduling service
• Send you service-related emails (booking confirmations, setup instructions, system updates)
• Respond to your questions and support requests
• Monitor and protect the security of our systems

We do not sell your personal information to third parties.

4. Information Sharing

We share your information only in these limited circumstances:

• Service providers: We use trusted third-party services (including Anthropic for AI responses, SendGrid for email delivery, Supabase for database storage, Stripe for payment processing, and DigitalOcean for hosting) that process data on our behalf under strict confidentiality obligations.
• Legal requirements: We may disclose information if required by law or to protect the rights and safety of AppointedAI, our users, or the public.
• Business transfers: If AppointedAI is acquired or merges with another company, your information may be transferred as part of that transaction.

5. Data Storage and Security

Your data is stored on secure servers hosted by DigitalOcean in the United States. We use industry-standard security measures including encrypted connections (HTTPS/TLS) and access controls to protect your information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide our Service. If you close your account or request deletion, we will delete your personal information within 30 days, except where we are required to retain it for legal or business purposes.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Revoke Google Calendar access at any time through your Google account
• Opt out of non-essential communications

To exercise any of these rights, contact us at the address below, or use our data deletion request form. We will verify your request (typically by confirming the email address on file) before fulfilling it, and will complete deletion requests within 30 days as described in Section 6.

7a. California Residents (CCPA/CPRA)

If you are a California resident, you have the rights described above plus the right to know the specific categories of personal information we have collected about you in the preceding 12 months. The categories we collect are listed in Section 1 of this policy. We do not sell or share your personal information for cross-context behavioral advertising, so no "opt out of sale" mechanism is required. You will not be discriminated against for exercising any of these rights.

7b. European Economic Area / UK Residents (GDPR)

If you are located in the EEA or UK, the legal basis for our processing of your personal information is: performance of a contract (providing the scheduling Service you or your business signed up for), our legitimate interests (security, fraud prevention, service improvement), and, where applicable, your consent (such as connecting your Google Calendar). In addition to the rights listed above, you have the right to data portability, the right to restrict or object to certain processing, and the right to lodge a complaint with your local data protection authority. Because our servers are located in the United States, any personal information transferred from the EEA/UK to the US is done so based on your consent to use the Service and our contractual obligations to you; we do not transfer EEA/UK personal information to any other third country.

8. Cookies

We use minimal cookies necessary for the Service to function (such as session cookies for authenticated pages). We do not use tracking or advertising cookies.

9. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.