Privacy Policy

1. Who is responsible for your data

Data controller: Ask My Envoy, a French SASU with share capital of €1,000, registered with the Paris Trade and Companies Register under SIREN 106 746 670, VAT number FR51 106 746 670, with its registered office at 48 rue de Moscou, 75008 Paris, France.
Contact: [email protected]

2. What we collect

Depending on how you use the Services, we may collect:

• Account data: email, name, authentication identifiers such as your Google or Microsoft sign-in ID, and profile information you provide.
• Scheduling and conversation data: information you provide when interacting with your Envoy, such as meeting requests, participant names or email addresses, timing preferences, meeting titles and other instructions needed to coordinate a meeting.
• Calendar data: if you connect a calendar, the information we access depends on how you use Ask My Envoy. If you connect your calendar so that another person's Envoy can coordinate meetings with you, and you authorize that access, that Envoy can access only your free/busy availability for the relevant period. It cannot access your meeting titles, participants, descriptions, locations or other event details. If you have your own Envoy, it can access the full details of your calendar, including meeting titles, participants, descriptions, locations and other event information, as needed to schedule, reschedule or cancel meetings on your behalf.
• Subscription and billing data: information related to your subscription, such as your subscription status, billing status and transaction identifiers. Payment card details are processed by our payment provider and are not stored by Ask My Envoy.
• Usage and log data: technical information such as IP address, device and browser information, timestamps and actions taken, used for security, debugging and operation of the Services.

You can revoke your calendar connection at any time through Ask My Envoy or your calendar provider.

3. Why we use your data

We use your data to:

• Provide and operate the Services, including account access, calendar connections and meeting coordination.
• Process scheduling requests and allow your Envoy to work on your behalf.
• Manage subscriptions and billing.
• Secure the Services and prevent abuse.
• Monitor, debug and improve the reliability and performance of the Services.
• Send product news or updates only where you have opted in.

4. Legal bases (GDPR)

Where applicable, we rely on:

• Contract / steps before contract (to provide the Services you request).
• Legitimate interests (security, preventing abuse, improving reliability).
• Consent (marketing/news opt-in; you can unsubscribe anytime).
• Legal obligations (if required).

5. Sharing

We do not sell personal data.

We may share personal data with:

• Service providers: providers supporting hosting, infrastructure, monitoring, email delivery, authentication, billing and other functions required to operate the Services.
• Calendar providers: such as Google and Microsoft, when you connect your calendar.
• AI and technology providers: providers used to process requests and operate AI-powered features of the Services.
• Legal or regulatory authorities: where disclosure is required by law or necessary to protect our rights, users or the Services.

Where applicable, providers processing personal data on our behalf act under contractual and data-protection obligations.

6. Security and sensitive data protection

Calendar and scheduling information may be sensitive depending on context. We use technical and organizational safeguards designed to protect personal data, including:

• Encryption of data in transit using TLS/HTTPS.
• Encryption of calendar access credentials before storage.
• Authentication and access controls restricting access to systems and data.
• Limited calendar access depending on how Ask My Envoy is used. Another person's Envoy is limited to authorized free/busy availability, while your own Envoy can access the calendar details required to work on your behalf.
• Operational and security logging used to detect failures, misuse and security issues.
• Controls allowing users to revoke calendar connections and access.

No system can provide absolute security, but we take reasonable measures to protect personal data against unauthorized access, loss, misuse or disclosure.

7. International transfers

Some of our service providers may process personal data outside the European Economic Area. Where required, we use appropriate safeguards for international data transfers.

8. Retention

We keep personal data only for as long as necessary to provide and operate the Services, maintain security, comply with legal obligations and resolve disputes.

Calendar connection credentials are retained while the connection remains active and can be revoked by the user at any time.

Retention periods may vary depending on the type of data and the purpose for which it is processed. You may request deletion of your personal data, subject to any legal or operational retention requirements.

9. Your rights

Depending on your location and the applicable law, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, request portability of certain data, and withdraw consent where processing is based on consent.

You may exercise these rights by contacting [email protected].

If you are in the European Union, you also have the right to lodge a complaint with the CNIL or another competent data protection authority.

10. Changes

We may update this policy. We'll post the latest version on this page and update the date above.