Google User Data Policy
1. Overview
This Google User Data Policy supplements the Onyx Privacy Policy. It applies when you connect a Google account to Onyx through the Google Calendar integration. For Google user data, where this policy and the Privacy Policy differ, this policy controls.
2. What We Access
When you connect Google Calendar, you choose which of your calendars Onyx reads and which one calendar Onyx adds appointments to. With your permission, Onyx accesses:
Your Google account email address, to confirm it matches your Onyx login
The list of calendars on your Google account (name, ID and your access level), so you can choose calendars
Events on the calendars you select, from today through the next 90 days: start and end time, title, description, whether you organize the event, and your response to it. For events marked private in Google, Onyx stores only the time and shows the title "Busy"
Events Onyx creates on the calendar you choose for Onyx appointments
Onyx does not access your email, contacts, files or any other Google service, and does not store event guest lists or attachments.
3. How We Use It
To show your Google events in your Onyx calendar and treat them as busy time, so that you, people in your organization who schedule for you, and Onyx's automated scheduling assistants do not book appointments over them
To add, update and remove events on the Google calendar you choose for appointments booked in Onyx, including appointments booked by Onyx's AI voice and text assistants. These events contain the appointment title and a link to the appointment in Onyx. They do not contain client phone numbers, dates of birth or notes
To change the time of an event you organize when you reschedule it in Onyx. Google then notifies the event's guests
We use Google user data only to provide these features to you.
4. Who Can See It
Your imported Google events are visible in Onyx to you and to users in your organization who have permission to view your calendar. Onyx's API and MCP connector show your Google events only as "Busy" with their times, without titles or descriptions.
Onyx personnel do not read your Google user data unless you ask us to for support, it is needed for security or to investigate abuse, or the law requires it.
5. What We Do Not Do
We do not sell Google user data
We do not use or transfer it for advertising, including retargeting or interest-based ads
We do not use or transfer it to determine credit-worthiness or for lending
We do not use it to create, train or improve AI or machine learning models
We do not transfer it to data brokers or other third parties, except to the service providers that host and operate Onyx for us, such as Amazon Web Services, under confidentiality obligations; to comply with law; or as part of a merger, acquisition or sale of assets, and then only after obtaining your explicit consent
These limits also apply to data aggregated, anonymized or derived from Google user data. The Privacy Policy's section on Platform Improvement and Deidentified Data does not apply to Google user data.
6. Storage and Security
Google access and refresh tokens are encrypted at rest. Google user data is encrypted in transit and stored on Onyx's infrastructure in the United States.
7. Retention and Deletion
Onyx refreshes your imported events every few minutes and keeps them in step with your Google calendars. Imported events are deleted from Onyx when you stop reading a calendar or disconnect.
To disconnect, go to My Profile → Integrations → Google Calendar → Disconnect. Disconnecting revokes Onyx's access at Google and deletes your tokens and imported events. Copies in our encrypted backups are removed as those backups expire on their normal cycle. Events Onyx added to your Google calendar stay there until you delete them.
You can also remove Onyx's access at myaccount.google.com/permissions. If your Onyx user is deactivated, Onyx revokes its access the same way. To ask us to delete any remaining Google user data, email compliance@onyxplatform.com.
8. Changes to This Policy
If we change how we use Google user data, we will tell you and ask for your consent before using it in the new way. We will post any revised version of this policy on this page with an updated date.
9. Google API Services User Data Policy
Onyx's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
10. Contact Us
Questions about this policy or Onyx's use of Google user data: compliance@onyxplatform.com