Privacy Policy

Provider calendar connections

When a service provider chooses to connect Google Calendar or Microsoft Calendar through a private Smartroute setup link, we receive the provider's connected-account identifier and email address and an OAuth credential. We create a dedicated calendar named “Smartroute — [business name]” and use it to create, update, cancel, and delete that provider's assigned Smartroute appointment events. Those events may include the appointment date and time, customer or group name, customer email and phone number, services, notes, time zone, service address, and assigned-provider names. The business that invited the provider can see the connected email address and connection status, but cannot browse the connected calendar account through Smartroute.

For Google, the permission is limited to secondary calendars created by Smartroute and does not let Smartroute read or modify the provider's primary calendar or other existing calendars. Microsoft's delegated calendar permission may authorize broader calendar access at the Microsoft platform level. Smartroute limits its provider-calendar operations to the dedicated secondary calendar it creates and does not use this feature to read or modify existing calendars.

Smartroute Meeting Intelligence

A separate, founder-controlled integration uses read-only Google Calendar and Google Meet access for the dedicated Smartroute demo workflow. When enabled, Smartroute first matches a completed Google Meet session to the exact scheduled demo event. It then reads the meeting's participant details and Google-generated transcript to create protected meeting evidence and customer follow-up. Full meeting recordings remain with Google and are not stored by Smartroute. If separately enabled, transcript text may be processed by OpenAI to produce evidence-backed customer-relationship suggestions. Derived information, including participant and contact details, Company attributes, Deal fields, follow-up notes, next steps, and tasks, may be sent to Attio. This integration does not modify Google calendars, meetings, recordings, or accounts.

Storage, sharing, and removal

Provider-calendar OAuth credentials are encrypted at rest and retained until the provider calendar is disconnected. Disconnecting removes the stored credential and stops future updates. The dedicated calendar and events already created in the connected Google or Microsoft account remain until the account owner deletes them. The Meeting Intelligence OAuth credential is kept as a restricted deployment secret. If Meeting Intelligence is activated, transcript evidence is retained to provide and audit customer follow-up. When automated retention is enabled, raw transcript text is redacted after the configured period. You may request deletion as described below.

We do not sell connected calendar account data or Google user data or use it for advertising. We share it only with service providers necessary to deliver the requested features; for security or legal reasons; or, with your explicit consent, to provide another prominent user-facing feature you request. Smartroute's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You may review that policy on Google's website. You may revoke Google access from your Google Account or Microsoft access from your Microsoft Account at any time, or contact us using the address below.