Connected account privacy

Information we access

Google authorization requests read-only access to calendar properties and free/busy availability. The portal reads your primary calendar name to identify the connection and requests busy time intervals for the scheduling range being checked. It does not request permission to read Google event contents or to create, edit, or delete events.

Microsoft authorization permits basic calendar access. The portal requests event start and end times and availability status, without requesting event titles, descriptions, attendees, or locations. Connecting a calendar does not grant the portal Gmail access.

How the information is used

Authorized portal users can check availability for people they are allowed to see. They receive a free, busy, or unavailable status and, when busy, the relevant time intervals. Calendar data is used for this scheduling feature. It is not sold, used for advertising, or used to train artificial intelligence models.

The portal communicates with Google or Microsoft to authorize the connection, refresh its access, and retrieve availability. Our hosting and database infrastructure processes the information to operate the feature. We do not share connected calendar data for unrelated purposes.

KRE8IV Client Portal's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Optional marketing connections

Google Analytics authorization requests read-only access to Analytics data. The portal lists accessible GA4 properties and reads aggregate sessions, active users and key events for the selected property. Google Ads authorization uses Google's Ads scope, which is broader than read-only; the portal only lists accessible accounts and reads aggregate impressions, clicks, advertising cost and conversions. It does not change campaigns, publish advertisements or spend money.

These connections belong to your portal user within your client account and are available when included in an active marketing plan. We store encrypted access and refresh tokens, provider, selected property or account identifier, your portal user and client identifiers, expiry and connection timestamps. Performance summaries are retrieved when requested.

Marketing tools create drafts from the brief, supporting data and client brand context. If you choose to attach or copy a connected performance summary into a draft's supporting data, that supplied data is sent to the configured AI service (OpenRouter and its selected model provider, or a client-configured OpenAI provider). Reports are not automatically forwarded to an AI provider. Review the disclosure beside the draft form before submitting, and do not include sensitive personal information. Drafts and usage records are saved within your client account for review.

Use Disconnect in Marketing → Connections to remove the stored marketing connection and tokens. This does not alter the source Google account or remove previously saved drafts. You can revoke the app in Google account settings and contact us to request deletion of saved information. Disconnect remains available after a plan expires. Backup copies may persist under our recovery retention practices.

Storage and security

The portal stores the connection's provider, calendar identifier and name, your portal user identifier, access and refresh tokens, token expiry, and connection timestamps. Tokens are encrypted at rest using AES-256-GCM. Refresh tokens allow availability checks to continue without asking you to sign in for each check. Availability responses are processed for the requested scheduling check; the calendar integration does not store event contents or a copy of your calendar.

Your choices and deletion

Connecting a calendar is optional. Use Disconnect in Settings → Calendar to remove the stored connection and its tokens from the active portal database. This does not delete or change your Google or Microsoft calendar. You can also revoke the app's access through your provider's account settings. Previously created backups may retain earlier records for recovery under our backup retention practices.

To ask about your information, request a copy, correction, or deletion, contact info@kre8ivdesigns.com. We may need to verify your identity before acting on a request.