Privacy Policy

Last updated: 2026

1. Information We Collect

We collect information you provide directly to us, including:

  • Account information (name, email, password)
  • Profile information
  • Property and tenant data you enter
  • Communication preferences
  • Usage data and analytics

2. Google Calendar Data

When you connect your Google Calendar, CourierFlow accesses:

  • Event titles — to detect event types (move-in, inspection, etc.)
  • Event dates and times — to schedule communication workflows
  • Event descriptions — as fallback for event type detection
  • Attendee information — to match tenants to events

This data is stored in our database to enable event detection, workflow scheduling, and communication delivery. Calendar data is retained for 90 days after the event date, then deleted.

CourierFlow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only use Google data to provide and improve the calendar automation features you requested
  • We do not sell Google user data
  • We do not use Google data for advertising
  • We do not allow humans to read your Google data except with your consent, for security purposes, or to comply with applicable law

3. AI Processing

CourierFlow uses AI (OpenAI) for:

  • Event type detection when rule-based parsing is ambiguous
  • Communication content generation and refinement

Before any data is sent to AI services, we apply PII redaction to remove email addresses, phone numbers, and full addresses from the input. Only sanitized event titles and descriptions are sent to the AI provider.

AI processing results (model name, confidence scores, parsed fields) are stored for audit purposes and retained for 90 days.

4. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send technical notices, updates, and security alerts
  • Respond to your comments, questions, and support requests
  • Monitor and analyze trends, usage, and activities

5. Information Sharing

We do not sell your personal information. We may share information:

  • With your consent
  • To comply with legal obligations
  • To protect our rights and prevent fraud
  • With service providers who assist our operations (Twilio for SMS, OpenAI for AI processing, Stripe for billing, Google for calendar integration)

6. Data Security

We implement appropriate security measures to protect your personal information, including:

  • Encryption of data in transit (TLS/HTTPS) and at rest
  • Regular security assessments
  • Access controls and authentication
  • Secure data backup procedures
  • User-scoped database queries preventing cross-account access

7. Data Retention and Deletion

We retain data only as long as necessary for the purposes described in this policy:

  • Calendar events: 90 days after event date
  • Communication messages: 90 days after delivery
  • Audit logs: 12 months
  • AI processing traces: 90 days
  • Documents and files: Until you delete them or disconnect Google Drive
  • General application logs: 90 days

To request data deletion: Contact us at support@courierflow.com or delete your account through the Settings page. Upon account deletion, all associated data is removed within 30 days, except where retention is required by law.

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data
  • Opt out of marketing communications

9. Cookies and Tracking

We use cookies and similar technologies to:

  • Keep you signed in
  • Remember your preferences
  • Analyze site traffic and usage
  • Improve our services

10. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: support@courierflow.com

Back to Dashboard