Privacy Policy
Effective 4 October 2026
This policy explains what the TruWAI website (www.truwai.com) and TruCalendar (calendar.truwai.com) collect, why, how long it is kept and the choices you have. Both are operated by TruWAI ("we", "us").
The short version
- TruCalendar can act only through a published, numbered list of permissions, which you can read before you sign in at calendar.truwai.com/permissions. Every action it takes or refuses is recorded in an activity log you can check.
- To find meeting times it reads when you are busy, never the titles, descriptions, locations or attendees of your events.
- It creates a meeting or sends an invitation only after you approve that specific meeting.
- We do not sell your data, show advertising or use your data to train AI models.
- Our administrator can see your account's email address, name, status and activity counts, never your calendar, contacts or meetings.
The TruWAI website
www.truwai.com is a set of static pages. It sets no cookies and uses no analytics, third-party scripts or third-party fonts. Like most web servers, ours records each request's IP address, time, the page requested (without query strings or private link codes) and the browser's user-agent string. We use these logs only for security and troubleshooting, and delete them after 14 days.
TruCalendar: what we collect and why
| Information | Why we need it | Where it comes from |
|---|---|---|
| Your name, email address and Google account ID | To sign you in and show who you are | Google, when you sign in |
| Your Google connection keys (OAuth tokens) | To act for you within the permissions you grant, including while you are away | Google; stored encrypted |
| The start and end times when you are busy | To find times that work | Google Calendar, only for the dates being scheduled |
| Meetings you approve: title, time, attendees, video link if you add one, and the event's ID | To create the meeting, and to change or cancel it when you ask | You; Google sends the invitations |
| Contacts you add or import (name, email address, organisation) and the tiers, priorities and time rules you give them | To schedule with the right people at the right times | You; Google Contacts only when you click Import |
| Your settings and permission choices, with the time you made them | To honour your choices and show their history | You |
| The activity log: each operation TruCalendar performed or refused, the permission involved, the time and the outcome | So you can verify what TruCalendar did | TruCalendar; it stores fingerprints (hashes) of requests, not their content |
| Account status and when you were last active | To run the service and handle suspensions | TruCalendar |
| Requests you type into the scheduling box | To understand what you want to schedule | You |
TruCalendar sets one cookie, to keep you signed in for up to 14 days. It is marked Secure and HttpOnly and is not used for advertising or analytics.
People you invite (guests)
Guests do not need an account. When you ask to meet someone, TruCalendar stores their email address and name and, with their consent, their replies. A guest may choose to connect a calendar so TruCalendar can check their busy times for the proposed dates only (free/busy access, never event details). Each consent is recorded with the time it was given.
A guest can withdraw consent at any time from the guest page or from any TruCalendar message. Withdrawing deletes their busy times and removes them from stored scheduling runs; only a record that consent existed remains in the organiser's activity log.
The AI assistant (optional)
The assistant is off unless you turn it on. With it off, TruCalendar reads your request with its built-in parser and nothing leaves our server.
With it on, TruCalendar sends Anthropic, the AI provider, only the request you typed, today's date, your time zone, and the name, email address and tier of the contacts your request mentions. It never sends your busy times, events, other contacts or guest data. If you choose "Ask each time", TruCalendar shows you exactly what will be sent and waits for your confirmation. Anthropic processes these requests under its commercial terms and, by default, does not use inputs or outputs from its API to train its models.
Google user data
TruCalendar's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide the TruCalendar features you see and use.
- We do not use it for advertising, do not sell it, and do not use it to train generalised AI or machine-learning models.
- We transfer it only as this policy describes: to Anthropic when you use the assistant (the contacts your request mentions), or when the law requires it or abuse must be investigated.
- No person reads your Google user data unless you ask us to for support, it is needed to investigate abuse or a security incident, or the law requires it.
TruCalendar currently asks Google for these permissions, each only when you use the feature that needs it:
| Google permission | What TruCalendar does with it |
|---|---|
openid, email, profile | Signs you in and shows your name and email address. |
calendar.freebusy | Reads when you are busy. Guests who connect a calendar grant only this. |
calendar.events.owned | Creates the meetings you approve and changes or cancels only meetings TruCalendar created. Google's consent screen describes this permission more broadly ("see, create, change and delete events on calendars you own"); TruCalendar's permission gateway allows only the actions listed here. |
contacts.readonly | Reads contact names, email addresses and organisations when you click Import. |
If a future feature needs a different kind of Google data, we will update this policy and ask for your consent in TruCalendar before using it.
Who we share information with
- Google Cloud hosts our servers in the United States.
- Google receives the requests TruCalendar makes to your Google account on your behalf, such as creating a meeting you approved.
- Anthropic, only when you use the AI assistant, as described above.
- Authorities, if the law requires it.
If TruWAI is ever part of a merger or sale, we will ask for your consent before your Google user data is transferred. We do not sell or rent personal information.
What our administrator can see
The administrator console shows each account's email address, name, status (active or suspended, with the reason), sign-up and last-active dates, and counts such as how many contacts, meetings and permission checks the account has, plus totals for the whole service. It does not show calendar data, contact details, meetings, guest data or assistant requests. This limit is one of TruCalendar's published rules.
How long we keep information
| Information | Kept |
|---|---|
| Account details | While your account exists |
| Google connection keys | Until you disconnect Google or delete your account |
| Busy times (yours and guests') | Only with the scheduling run or meeting that used them; deleted after 90 days |
| Assistant requests and drafts | With the scheduling run; deleted after 90 days |
| Meetings TruCalendar created (event ID and approved details) | Until you delete your account, so TruCalendar can change or cancel them when you ask |
| Contacts, tiers and rules | Until you delete the contact or your account |
| Messages to guests | With the meeting, for 90 days |
| Guest name, email address and replies | For a single meeting, until 30 days after the meeting; for a standing permission, until the guest withdraws it |
| Activity log | 365 days |
| Web server logs | 14 days |
| Backups | Nightly copies kept for 7 days, so deleted information leaves our backups within 7 days |
Your choices
- See everything TruCalendar did on its Activity page, and check that the log has not been altered.
- Turn any optional permission on or off, or set it to ask each time.
- Download your contacts and your activity log as spreadsheet (CSV) files.
- Disconnect Google in TruCalendar. You can also remove TruCalendar from your Google account at myaccount.google.com/connections.
- Delete your account on TruCalendar's Account page. This revokes TruCalendar's access to Google and deletes your account details, connection keys, contacts, tiers and rules, meetings, scheduling runs and messages to guests. Meetings already on your calendar stay there. Activity-log entries, which hold no names, addresses or calendar content, are kept until their 365-day limit.
- Ask us for a copy of your information, or to correct or delete it, by writing to contact@truwai.com.
Security
All traffic uses HTTPS. Google connection keys are encrypted at rest. TruCalendar's server can reach Google only through a permission gateway that checks every call against the published list and refuses anything else, and the activity log is chained so that any edit or deletion is detectable. Access to the server is limited to the administrator. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.
Children
TruCalendar is for adults. You must be 18 or older to create an account, and we do not knowingly collect information from children.
Changes to this policy
We will post any change here with a new effective date. If a change affects how TruCalendar uses Google user data, TruCalendar will ask for your consent before using data in the new way.
Contact
TruWAI · contact@truwai.com