Introduction
Soon ("we", "our", or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our application.
Information We Collect
When you use Soon, we collect and process the following information from your Google account:
1. Basic Profile Information
- Name - To personalize your experience and identify you within the application
- Email address - To uniquely identify your account and communicate with you
- Profile picture - To display your avatar in the user interface
2. Google Calendar Data
- Calendar events - To display, manage, and help you schedule meetings and tasks
- Calendar metadata - Including event titles, descriptions, start/end times, attendees, and locations
- Calendar permissions - We request both read and write access to create, update, and delete calendar events on your behalf
How We Use Your Information
We use your information solely for the following purposes:
- Authentication - To verify your identity and provide secure access to your account
- Calendar Management - To display your schedule, create events, and manage your calendar
- User Experience - To personalize the interface with your name and profile picture
- Service Improvement - To understand how users interact with Soon and improve functionality
Data Storage and Security
- Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols
- Secure Storage: Your Google access tokens are securely stored and encrypted in our database
- Access Control: We implement strict access controls to ensure only authorized personnel can access user data
- Third-Party Services: We use Supabase for authentication and database management, which complies with SOC 2 Type II standards
Data Retention
- Active Accounts: We retain your data for as long as your account is active
- Inactive Accounts: If you stop using Soon, your data may be retained for up to 90 days before automatic deletion
- Deletion Requests: You can request immediate deletion of your data at any time (see below)
Your Rights and Choices
1. Access Your Data
You can view all information we have collected about you by logging into your account.
2. Delete Your Data
You can delete your account and all associated data at any time by:
- Logging into Soon
- Going to Settings → Account
- Clicking "Delete Account"
- Or by emailing us at support@meetsoon.ai
Upon account deletion, we will:
- Immediately revoke all Google API access tokens
- Delete all stored calendar data within 30 days
- Remove your profile information from our systems
3. Revoke Access
You can revoke Soon's access to your Google data at any time by:
- Visiting your Google Account Permissions page
- Finding "Soon" in the list of connected apps
- Clicking "Remove Access"
4. Export Your Data
You can request a copy of your data by emailing us at support@meetsoon.ai
Data Sharing and Third Parties
We do not sell, rent, or share your personal information with third parties for marketing purposes.
We only share data with:
- Google APIs - To access your calendar data as authorized by you
- Supabase - Our authentication and database provider (SOC 2 Type II compliant)
- Legal Requirements - When required by law or to protect our rights
Google API Services User Data Policy
Soon's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only request the minimum scopes necessary for Soon to function
- We do not use Google user data for serving advertisements
- We do not allow humans to read your data unless:
- You explicitly consent
- It's necessary for security purposes (e.g., investigating abuse)
- It's required to comply with applicable law
Children's Privacy
Soon is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes:
- We will update the "Last Updated" date at the top of this policy
- For material changes, we will notify you via email or in-app notification
- Continued use of Soon after changes constitutes acceptance of the updated policy
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Compliance
Soon complies with:
- Google API Services User Data Policy
- California Consumer Privacy Act (CCPA) where applicable
- General Data Protection Regulation (GDPR) where applicable
- Other relevant data protection laws