Privacy Policy

Last Updated: March 4, 2026

UpConvert ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our services.

1. Information We Collect

We collect information you provide directly to us, including:

• Account Information: Name, email address, and profile picture (via Google OAuth).
• Calendar Events (Read-Only): We request read-only access to your Google Calendar events in order to match each recording to the correct meeting and to identify the attendee list. (Scope: calendar.events.readonly)
• Gmail Send Access: We request permission to send emails on your behalf solely to deliver the AI-generated follow-up email you review and approve after each meeting. We never read, search, or access your inbox or any existing emails. (Scope: gmail.send)

2. How We Use Your Information

We use your information solely to provide the UpConvert service:

• To authenticate you and manage your account.
• To ensure meeting recordings are attributed to the correct calendar event.
• To extract participant lists from calendar invites to provide context for your follow-ups.
• To generate AI-powered summaries and follow-up emails based on your meeting transcripts.

Google Scopes We Request — and Why

UpConvert requests the minimum set of Google OAuth scopes needed to make the product work. Here is exactly what each scope does and why it is required:

• openid · userinfo.email · userinfo.profile — Standard OpenID Connect scopes that let us authenticate you, display your name and avatar in the extension, and keep you securely signed in. Without these we cannot identify who you are.
• calendar.events.readonly — Read-only access to your Google Calendar events. We use this to:
  • Find the calendar event that matches the meeting you just recorded (by searching for events around the recording time on the same calendar).
  • Pull the attendee list from that event so the AI summary has accurate participant context.
  We never create, edit, or delete calendar events. The "readonly" suffix in the scope name is enforced by Google — we are technically incapable of writing to your calendar.
• gmail.send — Permission to send emails on your behalf. We use this exclusively to deliver the follow-up email you have reviewed and approved in the UpConvert extension after a meeting. The email is shown to you in full before anything is sent — you can edit or skip it at any time. We never read, search, modify, or delete any emails in your inbox. We are technically incapable of accessing email content; this scope only allows outbound sending.

3. Limited Use Policy (Google API Services)

UpConvert's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not transfer your data to third parties for purposes other than providing or improving the application's functionality. We do not use your data for advertising, market research, or any other commercial purpose.

4. Data Retention

We retain your data only for as long as necessary to provide our services or as required by law.

• OAuth Tokens: Stored securely until you revoke access or delete your account.
• Meeting Transcripts & Summaries: Retained to give you a history of past meetings. Deleted upon account closure.

5. Data Deletion

You have the right to request deletion of your personal data at any time.

• Account Deletion: Email mkane@upconvertapp.com. Upon verification, all your data will be permanently deleted within 30 days.
• Revoking Google Access: You can revoke UpConvert's access at any time via your Google Account security settings. This immediately stops data processing.

6. Data Sharing and Disclosure

We do not sell your Google user data. We do not share your personal data with third parties except as strictly necessary to host and operate the UpConvert service (e.g., Firebase / Google Cloud Platform). These providers are bound by confidentiality obligations and cannot use your data for any other purpose.

7. Data Security

UpConvert runs on Google Cloud Platform (Firebase). All data is encrypted in transit (HTTPS) and at rest by Google's infrastructure. We do not operate independent servers or manage raw encryption keys.

8. Contact Us

Questions about this Privacy Policy or your data rights? Email us at mkane@upconvertapp.com.