Privacy Policy

Last Updated: January 15, 2025

1. Information We Collect

1.1 Personal Information You Provide

When you use Scheduly Assistant through Telegram, we collect:

• Telegram Account Information: Your Telegram user ID, username, and chat ID to identify and communicate with you
• Google Account Information: Email address, name, and profile information when you authorize access to your Google services
• Communication Data: Text messages, voice messages, and commands you send to the bot
• Authentication Tokens: OAuth 2.0 tokens from Google to access your authorized services

1.2 Google Services Data We Access

With your explicit authorization, we access the following Google services:

• Gmail: Read, send, compose, and manage your email messages
• Google Calendar: View, create, edit, and delete calendar events
• Google Tasks: Create, view, update, and manage your tasks
• Google Contacts: View, add, edit, and search your contacts

1.3 Automatically Collected Information

• Usage Data: Timestamps, feature usage, command frequency, and interaction patterns
• Technical Data: Error logs, performance metrics, and system diagnostics
• n8n Workflow Data: Automation workflow execution logs for service improvement

2. How We Use Your Information

We use your information exclusively for the following purposes:

2.1 Service Delivery

• Process your commands and requests sent via Telegram
• Access and manage your Gmail, Calendar, Tasks, and Contacts as you direct
• Execute automated workflows using n8n platform
• Provide AI-powered responses and assistance
• Enable voice command processing and natural language understanding

2.2 Service Improvement

• Analyze usage patterns to improve AI accuracy and response quality
• Debug technical issues and errors
• Develop new features and enhancements
• Optimize n8n workflow performance

2.3 Communication

• Send service notifications and updates via Telegram
• Respond to your support requests and inquiries
• Notify you of important security updates

2.4 Legal Compliance

• Comply with applicable laws and regulations
• Protect against fraud, abuse, and security threats
• Respond to legal requests from authorities

3. Google API Services & Data Access

3.1 Scope of Access

We only request the minimum necessary permissions (scopes) required to provide our services:

• Gmail Scopes: gmail.readonly, gmail.send, gmail.compose, gmail.modify
• Calendar Scopes: calendar.readonly, calendar.events
• Tasks Scopes: tasks.readonly, tasks
• Contacts Scopes: contacts.readonly, contacts.other.readonly

3.2 Limited Use Disclosure

Make AI Agents' use of information received from Google APIs will adhere to these principles:

• We will only use access to read, write, modify, or control Gmail message bodies, metadata, headers, and settings to provide the email management features you explicitly request
• We will not transfer Google user data to others unless necessary to provide or improve our service, comply with applicable law, or as part of a merger or acquisition with user notification
• We will not use Google user data for serving advertisements
• We will not allow humans to read user data unless we have explicit consent, it's necessary for security purposes, or to comply with applicable law

3.3 OAuth 2.0 Authorization

We use Google's OAuth 2.0 protocol for secure authentication and authorization:

• You grant permissions explicitly through Google's official consent screen
• You can revoke access at any time through your Google Account Permissions page
• Access tokens are encrypted and securely stored
• We never receive or store your Google password

4. Data Storage and Security

4.1 Security Measures

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data transmissions use TLS 1.3 encryption
• Encryption at Rest: Stored data is encrypted using AES-256 encryption
• Access Controls: Strict role-based access controls limit data access to authorized personnel only
• Regular Security Audits: Periodic security assessments and vulnerability scans
• Secure Infrastructure: Data stored on secure cloud infrastructure with redundancy and backups

4.2 Data Storage Location

• Data is stored on secure cloud servers in data centers compliant with international security standards
• OAuth tokens are stored separately from user data with additional encryption layers
• n8n workflow data is stored on isolated servers with restricted access

4.3 Data Retention

• Active User Data: Retained as long as your account is active
• OAuth Tokens: Retained until you revoke access or delete your account
• Usage Logs: Retained for 90 days for troubleshooting purposes
• Backup Data: Deleted within 30 days after account deletion

5. Data Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties, except in the following limited circumstances:

5.1 Service Providers

• n8n Platform: Automation workflows are executed using n8n infrastructure
• Cloud Hosting: Data is stored on secure cloud infrastructure providers
• AI Services: Voice and text processing may use third-party AI APIs (data is anonymized)

All service providers are bound by strict data protection agreements and are prohibited from using your data for any other purpose.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the personal safety of users or the public

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via Telegram before your data is transferred and becomes subject to a different privacy policy.

6. Your Rights and Choices

6.1 Access and Control

You have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and all associated data
• Portability: Request your data in a machine-readable format
• Objection: Object to certain processing of your data

6.2 Google Account Permissions

You can manage your Google account permissions at any time:

• Visit Google Account Permissions
• Find "Make AI Agents" or "Scheduly Assistant" in the list
• Click "Remove Access" to revoke all permissions
• Note: Revoking access will disable all bot functionality requiring Google services

6.3 Account Deletion

To delete your account and all associated data:

• Send a message to the bot with the command: /deleteaccount
• Or contact us at privacy@makeaiagents.dev
• We will delete all your data within 30 days

7. Data Retention and Deletion

7.1 Retention Periods

• User Account Data: Retained while your account is active
• OAuth Tokens: Deleted immediately upon access revocation or account deletion
• Chat History: Retained for 90 days or until account deletion
• Usage Logs: Retained for 90 days for troubleshooting
• Backup Data: Deleted within 30 days after primary deletion

7.2 Automated Deletion

• Inactive accounts (no usage for 12 months) receive deletion warnings
• Accounts inactive for 18 months are automatically deleted
• You will receive notifications before any automatic deletion

8. Third-Party Services and n8n

8.1 n8n Automation Platform

Our service uses n8n, a fair-code licensed workflow automation tool, to execute automation workflows:

• n8n workflows run on our secure infrastructure
• Workflow execution data is logged for debugging purposes
• n8n does not have direct access to your Google account credentials
• All data processed by n8n is encrypted and access-controlled

8.2 Telegram Platform

Our bot operates on Telegram's platform:

• Telegram's own Privacy Policy applies to your use of Telegram
• We do not control Telegram's data practices
• Messages sent via Telegram may be subject to Telegram's encryption policies

8.3 Google Services

When you grant access to Google services:

• Google's Privacy Policy and Terms of Service apply to your Google account
• We access your Google data only as authorized by you
• Google may monitor API usage for compliance and security

9. Children's Privacy

Our services are not intended for users under the age of 13 (or equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take immediate steps to delete such information.

If you believe a child has provided personal information to us, please contact us at privacy@makeaiagents.dev.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place:

• Data transfers comply with GDPR, CCPA, and other applicable regulations
• We use Standard Contractual Clauses for international transfers
• Data is encrypted during transfer and at rest

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes:

• We will update the "Last Updated" date at the top of this policy
• We will notify you via Telegram message
• We will post the new policy on our website
• Your continued use of our services after notification constitutes acceptance of the changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

12. Contact Us

© 2025 Make AI Agents. All rights reserved.