Privacy Policy
Last updated: May 17, 2026
Slotwise ("we", "us", "our") operates a WhatsApp-based scheduling assistant that connects to your Google Calendar. This policy describes what data we collect, how we use it, and your rights regarding that data.
1. Information We Collect
Account Information
- WhatsApp ID and display name — provided automatically when you message our bot
- Google account email and timezone — retrieved from Google Calendar settings when you connect your account
Calendar Data
- Event titles, times, and attendees — accessed from your Google Calendar only when you send a scheduling request or receive a daily/weekly reminder
- Free/busy information — queried to check availability when scheduling with other participants
Messages
- WhatsApp message text — the content of messages you send to our bot, processed to understand your scheduling intent
- Message IDs — stored to prevent duplicate processing of the same message
Contacts
- Contact names, phone numbers, and email addresses — stored only when you explicitly share a contact card or provide contact details for scheduling purposes
Waitlist
- Email address — collected via our website waitlist form, processed by Formspree
2. How We Use Information
We use your data exclusively to provide the scheduling service you request:
- Processing scheduling requests — interpreting your messages, checking your calendar, and creating/modifying/deleting events as you instruct
- Sending reminders — delivering daily or weekly schedule digests via WhatsApp, only if you opt in
- Remembering your contacts — so you don't need to re-share contact details for future scheduling
- Preventing abuse — rate limiting and message deduplication
We do not use your data for advertising, profiling, or selling to third parties.
3. Google Calendar Access
Slotwise requests access to your Google Calendar through OAuth 2.0 with the following scopes:
calendar.readonly — to read your events and check availabilitycalendar.events — to create, modify, or delete events on your behalf
How we use this access:
- Calendar data is accessed only in direct response to your requests (e.g., "What's on my Tuesday?" or "Book lunch with Marc at 13:00") or to send reminders you have explicitly enabled
- We do not perform background scanning, indexing, or bulk reading of your calendar
- We do not store your calendar events in our database — event data is fetched in real time, used to fulfill your request, and not retained
- We do not sell, share, or transfer your Google Calendar data to third parties for advertising, analytics, or any unrelated purpose
- Your Google refresh token is encrypted using AES-256-GCM before storage and is revoked immediately if you disconnect your account
Slotwise's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Messaging & WhatsApp Data
When you send a message to Slotwise via WhatsApp:
- Your message text is processed to determine your scheduling intent (e.g., create event, check availability, modify event)
- Message content is sent to our AI provider (see Section 5) for natural language understanding
- We store message IDs for deduplication but do not maintain a conversation history or archive of your messages
- Outgoing messages (confirmations, reminders) are sent via the WhatsApp Cloud API and are not stored on our servers
Messages are processed in real time and are not retained beyond what is necessary for deduplication.
5. AI Processing
To interpret your natural-language scheduling requests, we use Anthropic's Claude API:
- Your message text, timezone, and current date are sent to Claude for intent classification and parameter extraction
- Each message is processed as a single stateless request — we do not send conversation history or build user profiles
- We do not use your data to fine-tune or train AI models
- Anthropic processes data per their privacy policy; commercial API usage is not used for model training by default
Calendar event details (titles, times) may be included in AI requests when you ask to parse or manage multiple events at once.
6. Data Retention
- Account data — retained while your account is active; soft-deleted upon disconnection
- Google refresh tokens — encrypted at rest; revoked and deleted upon disconnection
- Contacts — retained until you ask us to forget them or delete your account
- Message IDs — retained for deduplication purposes
- Sessions — expire automatically (10 minutes to 24 hours depending on operation type)
- Calendar event data — not stored; fetched and used transiently per request
7. Data Sharing
We share data only with the service providers necessary to operate Slotwise:
| Provider |
Purpose |
Data shared |
| Google |
Calendar access & authentication |
OAuth tokens, calendar queries |
| Meta (WhatsApp) |
Message delivery |
Message content, phone numbers |
| Anthropic |
Natural language processing |
Message text, timezone, date context |
| Supabase |
Database hosting |
Account data, contacts, session state |
| Formspree |
Waitlist form processing |
Email address |
We do not sell your personal data. We do not share data with advertisers or data brokers.
8. Security
- Encryption in transit — all communications use HTTPS/TLS
- Encryption at rest — Google refresh tokens are encrypted using AES-256-GCM with authenticated encryption
- Webhook verification — incoming WhatsApp messages are verified using HMAC-SHA256 signatures with replay protection
- Rate limiting — per-user request throttling to prevent abuse
- Token revocation — Google access is revoked via Google's OAuth API upon account disconnection
- Access control — administrative endpoints require separate authentication
9. Your Rights
You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Deletion — ask us to delete your account and associated data by sending "disconnect" or "delete my data" to the bot
- Revoke access — disconnect Google Calendar at any time; your refresh token will be immediately revoked
- Forget contacts — ask the bot to forget any stored contact at any time
- Opt out of reminders — disable daily or weekly reminders at any time via chat
To exercise these rights, message the Slotwise bot directly or contact us at the address below.
10. Children's Privacy
Slotwise is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us for deletion.
11. Changes to This Policy
We may update this policy to reflect changes in our service. Material changes will be communicated via WhatsApp message to active users. The "last updated" date at the top indicates when this policy was last revised.
12. Contact
For privacy-related questions or requests: