Google Calendar Data Notice
Last updated: September 2026
1. Who this notice is for
This notice covers the people who connect a Google Calendar to 8x so that meetings our sales reps book land on their calendar: our clients' calendar owners and our own closers ("calendar owners"). It adds to, and does not replace, our other privacy notices.
The controller is 8x Social, Inc. ("8x", "we", "us"), 1111B S Governors Ave STE 47647, Dover, DE 19904, United States.
2. What we access, and why
When you connect, Google asks you to grant 8x these permissions. We use each one for one purpose only:
| Permission | What 8x does with it |
|---|---|
| Your name and email address (sign-in basics) | Shows you and your team which Google account is connected, and addresses booking notices to you. |
Free/busy (calendar.freebusy) | Checks when your primary calendar is busy, so reps offer prospects only times you are free. We see busy and free intervals only — never event titles, descriptions, attendees or locations. |
Events (calendar.events) | Creates a meeting on your primary calendar when a rep books one for your campaign, and may delete an event 8x itself just created (to undo a double-booking, or when it moves a meeting onto your calendar). We do not read, change or delete any event 8x did not create. |
3. What we store
- The connected account's name and email address, and the calendar id we book into.
- The hours, time zone and meeting settings you confirm on our settings page.
- A Google refresh token, encrypted at rest (AES-256-GCM), so we can check availability and book without asking you to sign in each time.
- The meetings 8x books for your campaign, which are part of our own booking records.
We do not store your free/busy data. It is fetched when a rep looks for a slot and discarded after use.
4. Sharing
We do not sell Google user data, and we do not use it for advertising, for credit or lending decisions, or to train AI or machine-learning models. We share it only:
- with our infrastructure providers that host the service (listed in our sub-processors list), acting on our instructions;
- with our own team, through 8x's internal workspace on Slack (Slack Technologies, LLC, United States): when a calendar connects we post the connected account's name, and when a connection breaks we post its email address, to an internal channel so our staff can follow up. Free/busy data and the contents of your calendar are never posted;
- where the law requires it, or to investigate security or abuse.
Reps never see your calendar. They see only the open time slots 8x offers them.
5. Who at 8x can see it
Our staff do not read your Google data except with your permission (for example, when you ask us to fix a connection problem), for security or abuse investigations, or where the law requires it.
6. Disconnecting and deletion
You can disconnect at any time from your campaign's Calendar card, or ask us to. Disconnecting revokes our access with Google and deletes the stored token. You can also remove 8x's access yourself at myaccount.google.com/permissions. Meetings already booked stay on your calendar until you delete them. To have the connection record deleted as well, email privacy@8x.social.
7. Google API Services User Data Policy
8x's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
8. Contact
Questions or requests: privacy@8x.social, or by post at the address above.