Privacy policy

Account and professional profile

We use your name, email, authentication information and the data you provide to create and protect your account. Email sign-in passwords are stored as hashes. Google sign-in provides your identifier, name, email and profile image.

You choose your profile content: introduction, approximate location, experience, education, projects, skills, links, photo and résumé. Publishing makes this information, including the displayed professional email and available résumé, accessible to visitors, search engines and automated agents. Draft profiles and their files remain private.

Calls and notifications

To schedule a call, we process participants' names and email addresses, the supplied message or reason, times, time zone and booking status. We use this information to confirm, reschedule or cancel calls and deliver related notifications. Information necessary for the call is shared between participants.

Optional Google Calendar and Meet connection

Google sign-in does not require calendar access. You can connect Google Calendar separately in your TheSync schedule settings. We use only the connected account's primary calendar.

We check busy periods to prevent conflicts. When rescheduling, we query events in the necessary time interval to distinguish the TheSync booking from other appointments. We create and update events for confirmed calls, request Google Meet links and remove events for cancelled calls. Participants' details and booking information are sent to Google to create events and invitations.

The calendar.events.freebusy and calendar.events.owned permissions allow availability checks and event management in calendars you own. Although Google's permission covers your owned calendars, TheSync's implementation uses the primary calendar and changes events it created for bookings.

We store account identifiers, granted permissions, encrypted access and refresh tokens, connection status, event identifiers and Meet links associated with bookings. We do not import your entire calendar to build a profile about you; other event information is queried to check conflicts.

Limited use of Google data

TheSync uses data received from Google APIs exclusively for sign-in and the calendar features you request. We do not sell this data, use it for advertising or use it to train artificial intelligence models.

TheSync's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not allow human reading of calendar data except with your specific authorization, for security, to meet legal obligations or in other circumstances permitted by that policy.

Service providers and storage

We use hosting and database infrastructure to operate the service, Cloudflare R2 for files and Brevo for transactional emails. These providers receive only the data needed for their respective service. Google processes authentication, Calendar and Meet information when you choose these integrations. Processing may take place in other countries.

We restrict access to private information, protect communications with HTTPS and encrypt Google integration tokens and sensitive notification data. Information you publish on your profile is public by your choice.

Cookies and metrics

We use cookies for your session and to recognize repeated visits to the same profile within 30 minutes. Metrics use derived identifiers and do not show a visitor's identity to the professional. Metric records are retained for up to 400 days. We respect Do Not Track and Global Privacy Control signals for these metrics. Language and interface preferences may also be stored in your browser.

Retention, disconnection and deletion

Account, profile and booking information is retained as needed to provide the service. You can edit or unpublish your profile, disconnect your calendar and delete your account in the dashboard. You can request access, correction or deletion through the contact below. Operational records and backups may remain as needed for security, recovery and applicable obligations.

Disconnecting Calendar removes the API tokens stored by TheSync while preserving the Google identity used for sign-in. You can also revoke access in your Google Account permissions. Events and invitations already created in Google are not removed when disconnecting or deleting your TheSync account; you can remove them directly in Calendar. Cancelling a booking while the integration is active requests removal of its event.

Changes and contact

Policy updates will be published here with a revision date. For questions about your information or Google permissions, contact Lucas Ferreira using the email below.

Contact