Privacy Policy

Effective October 2, 2026

Almai24 ("we", "us", "Almai24") provides an AI assistant that business owners use through WhatsApp to manage their calendar and related scheduling tasks. This policy explains what data we collect, why, and how it is protected.

What the assistant does

A business owner sends the assistant messages on WhatsApp — for example, asking it to schedule, move or cancel a meeting, check availability, or offer a third party a set of times to choose from. The assistant reads the request, prepares a plain-language draft of the action it's about to take, and only carries it out once the owner confirms.

What we collect

• WhatsApp messages and phone number. The content of messages exchanged with the assistant, and the phone number used to identify which business is messaging.
• Google Calendar data. With the owner's explicit consent via Google's OAuth screen, we read the owner's calendar to check availability and existing events, and create, modify or cancel events on their behalf. We request a single scope, calendar.events, and nothing broader.
• Owner contact details. Optionally, an owner's name and email address, used only to personalize outgoing email (see below) and, if given, as a reply-to address.
• Third-party contact details. When an owner asks the assistant to propose meeting times to someone else, that person's name and email address are collected to send them the proposal.
• Business settings. Business name, timezone and similar configuration needed to run the service correctly.

We do not collect data from anyone who has not interacted with the assistant through an owner's own account.

How we use it

• To understand a request and determine which action it describes. Message text is processed by Anthropic's Claude API for this purpose (see "Sub-processors" below) — Anthropic does not use this data to train its models.
• To read and update the owner's Google Calendar, strictly as instructed and confirmed by the owner.
• To send meeting-time proposals and related notifications by email.
• To send reminders ahead of scheduled meetings.
• To keep a record of what the assistant did and when, so an owner can see what happened on their behalf.

We do not sell personal data, and we do not use calendar content or message content for advertising.

Google user data specifically

Our use of information received from Google APIs adheres to the Google API Services User Data Policy. Calendar data is used only to provide the scheduling features described above, is never used for advertising, and is never transferred to third parties except where necessary to run those features (for example, encrypted storage) or required by law.

How data is protected

• Each business's data is isolated from every other business at the database level (row-level security), so one business can never read or modify another's calendar, messages or contacts.
• Google Calendar access tokens are encrypted at rest and are never stored or logged in plain text.
• Operational logs record identifiers and outcomes only — never the content of a message or calendar event.

Sub-processors

We use the following services to operate the assistant. Each processes data only as needed to provide its part of the service:

• Google — calendar access, under the scope and consent described above.
• Supabase — database hosting for all stored data.
• Anthropic — processes message text to determine the intended action.
• Resend — delivers outgoing email (meeting proposals, cancellations).

Data retention and deletion

We retain data for as long as an account is active, so the assistant can function and so an owner can review past activity. An owner may request deletion of their business's data, or revoke the assistant's access to their Google Calendar at any time via their Google Account permissions. To request deletion, contact us at the address below.

Children

This service is intended for business owners and is not directed to children. We do not knowingly collect data from children.

Changes to this policy

We may update this policy as the service changes. Material changes will be reflected here with an updated effective date.

Contact