Privacy Policy

1. Who we are

CaffeineAI (“Caffeine AI”, “we”) provides sales practice and meeting intelligence software at caffeineai.xyz. This policy explains what data our application accesses — including Google user data you authorise via OAuth — and how we use, store, share, and delete it. Contact us at privacy@caffeineai.xyz with any question or request.

2. Google user data we access

When you connect your Google account, our application accesses only the data covered by the scopes you consent to:

• Basic profile — your name and email address (openid, email), used to identify your account and match you to your organisation.
• Calendar events, read-only (calendar.readonly) — event titles, times, and attendees, used to find scheduled Google Meet calls to join, record, or import.
• Meet spaces, read-only (meetings.space.readonly) — meeting metadata and join information for the calls you ask us to attend.
• Drive files, read-only (drive.readonly) — only the meeting recordings and transcripts you explicitly import through the app, used to transcribe and analyse those meetings.

We do not access your Gmail, contacts, or any other Google data beyond the scopes above.

3. How we use Google user data

We use Google user data solely to provide and improve the user-facing features you request:

• syncing your calendar to detect and join scheduled meetings;
• fetching post-call transcripts and recordings you authorised;
• transcribing, diarising, and scoring your meetings against your organisation’s rubrics;
• showing your meetings, transcripts, and scores back to you and (subject to your organisation’s team hierarchy) your manager.

We do not use Google user data for advertising of any kind — no targeted, personalised, retargeted, or interest-based ads. We do not sell Google user data, provide it to data brokers or information resellers, or use it to determine credit-worthiness or for lending. Google Workspace APIs are not used to develop, improve, or train generalised (non-personalised) AI or machine-learning models.

4. Sharing and disclosure

We do not transfer or disclose Google user data to third parties except:

• AI processing you request — meeting transcripts you choose to score are processed by the AI model configured for your organisation, for the sole purpose of producing your scores;
• infrastructure providers strictly as needed to host and operate the service;
• legal obligations — where required by law or valid legal process.

We never share Google user data with advertisers, data brokers, or other third parties for their own purposes.

5. How we protect your data

• All traffic is encrypted in transit (TLS/HTTPS).
• OAuth tokens and provider secrets are stored encrypted at rest in a dedicated vault and never exposed to other organisations.
• Organisation data is strictly isolated (tenant-scoped access on every request), so one customer can never read another’s meetings or transcripts.
• Disconnecting Google (in the app, or revoking access in your Google account) immediately deletes our stored OAuth tokens.

6. Retention and deletion

We retain meeting data for as long as your organisation’s account is active and as needed to provide the service. Empty scheduled-meeting shells with no content are automatically hidden after 30 days. You may request export or deletion of your data at any time by writing to privacy@caffeineai.xyz; we delete or destroy data once its retention purpose expires unless a longer period is required or permitted by law.

7. Changes to this policy

If we change how CaffeineAI uses Google user data, we will update this page and notify users in the product. Continued use of the service after a change takes effect constitutes acceptance of the updated policy.