Privacy Policy
Effective Date: May 2023
Last Updated: November 2025
Your Data is Secure
We use OAuth 2.0 and encryption to protect your information
No Unwanted Tracking
We do not collect IP addresses, browser type, or ISP information
Never Sold or Traded
We never sell or trade your personal data
At Datum AI Labs ("we", "our", "us"), accessible at www.datumailabs.com, we respect your privacy and are committed to protecting it. This Privacy Policy explains how we collect, use, store, share, and protect information when you use our website, applications, and integrations—including the Calendar service offered in our Datumart platform which can connect to Google Calendar.
We do not collect IP addresses, browser type, or ISP information.
Who We Are & Scope
Datum AI Labs operates the Datumart platform, which supports scheduling, bookings, automations, and business workflow tools. This Privacy Policy applies to all visitors and users of our platform, including those who choose to sign in using Google Sign-Up / Login or connect Google Calendar. This Policy does not cover offline data or third-party websites we do not control.
Information We Collect
a) Information You Provide Directly
- Name, email address, phone number, organization name.
- Content of messages or attachments you send to us (e.g., contact forms, support requests).
- Booking/scheduling details you submit in the Datumart platform.
b) Information Collected via Google Sign-Up/Login
- Your Google account email.
- Your public profile name and profile picture (if available).
We do not receive your Google password, and we do not access Gmail, Contacts, Drive, or any other Google services.
c) Information from Google Calendar (Datumart Calendar Service)
If you connect Google Calendar to Datumart, we may access only what's necessary to provide calendar features:
- Event metadata: title, description, start/end times, time zone, attendee emails.
- Account identifier: your Google account email (to link your account).
- Event actions: create/update events only when you explicitly request it within Datumart.
We do not collect your Google password; we do not access Gmail, Contacts, or unrelated Google data; and we do not use calendar data for advertising, analytics, or profiling.
Our use and transfer of information received from Google APIs—including within the Datumart Calendar service—adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect at any time via your Google Account Permissions.
How We Use Information (Data Usage)
- Enable Google Sign-Up/Login for authentication.
- Provide and improve Datumart features (e.g., scheduling, booking, event sync).
- Display your existing events to avoid conflicts, and create/update events only at your request.
- Communicate confirmations, reminders, service updates, and support responses.
- Maintain security, prevent abuse, and ensure platform reliability.
We never sell or trade personal data.
Data Sharing (Third Parties & Purpose)
We do not sell Google user data and we do not share it for advertising.
We may share limited data with:
- Service providers / processors: (e.g., secure hosting, support tools, email delivery) strictly to operate our services. These providers are bound by confidentiality and may only process data on our instructions.
- Legal compliance: If required to comply with applicable law or regulation, we may disclose information after assessing the request's validity and scope.
- Business transfers: In case of a merger or acquisition, data may be transferred under the same commitments, with notice provided where required.
Data Storage & Protection (Security)
- OAuth 2.0: Access to Google data uses Google's OAuth 2.0. We do not store your Google credentials.
- Tokens: Access/refresh tokens are stored encrypted with restricted access.
- Transmission: All data in transit is protected via HTTPS/TLS.
- Access Controls: Role-based access and periodic reviews minimize personnel access.
- Segregation & Minimization: We process minimal and ephemeral calendar data unless you choose to store it.
- No IP/Browser/ISP collection.
Data Retention & Deletion
- Google Calendar data: Processed only at the time of your requested action. Not retained unless you explicitly save event data in Datumart.
- Account & contact information: Retained while active and as required by law.
- Support communications: Typically retained up to 24 months.
- Logs/operational records: Non-personal data retained only as needed.
Your Deletion Options
- Disconnect integration via Google Account Permissions.
- Delete data: Email support@datumailabs.com with subject "Data Deletion Request – Datumart".
- In-app deletion: Use available delete controls within Datumart.
Lawful Basis (GDPR/UK DPA)
- Performance of a contract (providing requested features).
- Legitimate interests (security, abuse prevention, improvement).
- Consent (connecting Google Calendar). Consent can be withdrawn anytime.
Your Rights
Depending on your location, you may have rights to access, rectify, erase, restrict, object, or port your data, and to withdraw consent. Contact support@datumailabs.com to exercise these rights. We will respond within applicable legal timeframes.
Children's Privacy
We do not knowingly collect personal information from children under 13. If you believe a child has provided data, contact us and we will delete it promptly.
Changes to This Policy
We may update this Policy to reflect changes in our practices or legal requirements. The "Last Updated" date will be revised, and material changes will be communicated as required.