Privacy Policy

1 Information We Collect

MeetingScheduled collects limited professional information related to business contacts for the purpose of business outreach. This may include:

• Full name
• Business email address
• Company name
• Job title or role
• Professional social media profiles (such as LinkedIn)
• Publicly available business information

We only collect information that is publicly available or provided through lawful third-party data providers.

2 Google Account and Gmail Data

MeetingScheduled requests access to your Google Account in order to send emails on your behalf and to track replies and delivery events. This section describes exactly what data is accessed, how it is used, and your rights.

Scopes we request:

• gmail.send — to send outbound sales emails from your Gmail account
• gmail.readonly — to detect when a prospect replies, when an email bounces, or when a recipient requests to unsubscribe, using the Gmail history API
• userinfo.email — to identify and display your sender email address
• userinfo.profile — to display your name within the application

Data we store from your Gmail account:

• Outbound emails you send via MeetingScheduled: The subject line and body of outbound emails are stored in our database. These are emails you have reviewed and approved through the application; they are not copies of your personal email.
• Reply detection: When a prospect replies to an email you sent, we record the prospect's email address, the reply's subject line, and a short preview of the reply (approximately 160 characters, auto-generated by Gmail's servers). We do not store or read the full reply body.
• Bounce and unsubscribe detection: When an email bounces or a recipient requests to unsubscribe, we record the event against the prospect record. No body content from bounce notification emails is stored.
• OAuth tokens: The access and refresh tokens that authorize MeetingScheduled to access your Gmail account are stored encrypted (AES-256-GCM) in our database.

What we do NOT do with your Gmail data:

• We do not read your personal emails, inbox history, or messages unrelated to outbound sales activity within MeetingScheduled.
• We do not sell your Gmail data or any data derived from your Gmail account.
• We do not use your Gmail data to show you advertisements or build advertising profiles.
• Gmail data is not used to train or fine-tune any AI or machine learning model. Outbound emails you author through MeetingScheduled may be processed by AI models only to draft, review, and generate follow-ups to those same emails on your behalf; they are not used to train models.
• MeetingScheduled personnel do not review Gmail message content except where necessary to provide the service, troubleshoot an issue at your request, or comply with legal or security obligations.

Third parties: Gmail-derived data is processed by our hosting provider (Vercel) and database provider (Supabase) as necessary service providers to operate the service. Our other service providers — Anthropic, Grok/xAI, ContactOut, RampedUp, Perplexity, Twilio, Groq, EnrichLayer, and Telegram — do not receive Gmail-derived data.

Revoking access: You can revoke MeetingScheduled's access to your Google Account at any time by visiting myaccount.google.com/permissions. After revoking access, MeetingScheduled will no longer be able to send emails or process Gmail events on your behalf.

Your data rights: You may request deletion of your account and associated data by contacting us at support@meeting-scheduled.com. We will review and process deletion requests in accordance with applicable law. If you request deletion, we may need to retain limited information where required for security, fraud prevention, legal compliance, or legitimate business records.

Gmail access is optional and requires explicit user authorization.

3 Sources of Data

We obtain personal data from:

• Publicly available online sources
• Business networking platforms
• Third-party B2B data providers such as ContactOut
• Company websites and professional profiles

We do not collect sensitive personal data.

4 Purpose of Processing

We process personal data for the following purposes:

• Identifying potential business prospects
• Conducting B2B sales outreach
• Sending outbound sales emails on behalf of users via their connected Gmail account
• Detecting prospect replies to update their status in the app
• Offering services that may be relevant to a professional role or organization
• Maintaining internal records related to business development activities

5 Legal Basis for Processing

Under GDPR, our legal basis for processing personal data is Legitimate Interest. We process business contact information where the individual holds a professional role relevant to our services, outreach is related to their business activities, and the impact on the individual's privacy is minimal.

All outreach communications include the ability to opt out of further communication.

6 Data Sharing

We do not sell personal data. Personal data may be shared with trusted service providers who help us operate our services, including:

• ContactOut — for prospect data and contact enrichment
• Google — for Gmail sending and reply detection (only with explicit user authorization)

These providers operate under their own privacy and security standards and maintain data processing agreements where applicable.

7 Data Retention

We retain personal data only for as long as necessary for business outreach purposes. When data is no longer required, it is deleted or anonymized.

8 Your Rights Under GDPR

Individuals located in the European Economic Area (EEA) have the following rights:

• The right to request access to their personal data
• The right to request correction of inaccurate information
• The right to request deletion of their personal data
• The right to object to processing for marketing purposes
• The right to request restriction of processing

Submit requests to: support@meeting-scheduled.com

9 Opt-Out of Communications

If you receive an email from MeetingScheduled and no longer wish to receive communications, you may reply requesting removal or use the unsubscribe option included in outreach emails. We will honor all opt-out requests promptly.

10 Data Security

We implement reasonable technical and organizational measures designed to protect personal data from unauthorized access, disclosure, alteration, or destruction.

11 International Data Transfers

MeetingScheduled operates from Israel. Personal data may be processed or stored in jurisdictions outside the European Economic Area where our service providers operate. When such transfers occur, we take reasonable steps to ensure that appropriate safeguards are in place.

12 Changes to This Policy

We may update this Privacy Policy from time to time. When updates are made, the "Last Updated" date at the top will be revised.

13 Contact