Last updated: September 2025
1. Information We Collect
MeetingMate is a Chrome extension that integrates with your Google Calendar. We collect the following information:
- Calendar events and meeting details from your Google Calendar
- Extension usage data to improve functionality
- Browser information necessary for extension operation
2. How We Use Your Information
We use the collected information to:
- Display your calendar events in the extension sidebar
- Send notifications for upcoming meetings
- Provide customizable display options for your events
- Improve the extension's performance and user experience
3. Data Storage and Security
MeetingMate prioritizes the security of your sensitive calendar data through multiple protection mechanisms:
3.1 Local Data Storage
All calendar data is stored exclusively on your local device using browser storage APIs. No sensitive information is transmitted to external servers or third-party services.
3.2 Data Encryption
- Storage Encryption: All locally stored calendar data is encrypted using AES-256 encryption standards
- Transit Security: All communications with Google Calendar APIs use TLS 1.3 encryption
- Memory Protection: Sensitive data in memory is cleared immediately after use
3.3 Access Controls
- Calendar access is restricted to read-only permissions via OAuth2
- No administrative or modification privileges are requested
- Access tokens are stored securely and refreshed automatically
3.4 Data Minimization
We collect only the minimum calendar data necessary for functionality:
- Event titles, times, and dates
- Meeting participants (display only)
- Event descriptions (for notification context)
3.5 Data Retention and Deletion
- Local Storage: Calendar data is retained only while the extension is active
- API-Based Refresh: Event data is automatically refreshed with each API call, overwriting previous cached data with current events from today onwards
- Uninstall Cleanup: All stored data is completely removed when the extension is uninstalled
- Manual Deletion: Users can clear all data through extension settings
3.6 Security Monitoring
- Regular security audits of data handling practices
- Monitoring for unauthorized access attempts
- Secure coding practices and vulnerability assessments
4. Google Calendar Integration
MeetingMate uses Google's OAuth2 authentication to securely access your calendar data. We only request read access to your calendar events and do not modify, create, or delete any calendar data.
5. Third-Party Services
We do not share your personal information with third parties. The extension only communicates with Google Calendar APIs as necessary for functionality.
6. Data Breach Response and Incident Management
In the unlikely event of a security incident involving your data:
- Immediate Response: Any potential security incidents are investigated within 24 hours
- User Notification: Affected users will be notified within 72 hours of confirming a breach
- Regulatory Compliance: We will comply with all applicable data breach notification requirements
- Remediation: Immediate steps will be taken to secure any compromised systems
- Transparency: Clear communication about the nature and scope of any incident
7. Privacy Rights and Compliance
7.1 Your Privacy Rights
You have the following rights regarding your personal data:
- Access: Request information about what data is stored locally
- Portability: Export your calendar data in standard formats
- Deletion: Complete removal of all stored data through uninstallation or manual deletion
- Restriction: Limit data processing by disabling specific features
- Revocation: Revoke calendar access at any time through your Google account settings
- Objection: Object to any data processing by uninstalling the extension
7.2 Regulatory Compliance
MeetingMate is designed to comply with major privacy regulations:
- GDPR (General Data Protection Regulation): Full compliance with EU data protection requirements
- CCPA (California Consumer Privacy Act): Adherence to California privacy rights
- COPPA (Children's Online Privacy Protection Act): No collection of data from children under 13
- PIPEDA (Personal Information Protection and Electronic Documents Act): Canadian privacy law compliance
8. Your Rights and Controls
You maintain complete control over your data:
- Revoke calendar access at any time through your Google account settings
- Uninstall the extension to stop all data collection and remove stored data
- Clear extension data manually through browser settings
- Contact us with any privacy concerns or requests
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify users of any significant changes through the extension or our website. Continued use of MeetingMate after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have any questions about this privacy policy or wish to exercise your privacy rights, please contact us through our support channels. We will respond to all privacy-related inquiries within 30 days.
