Google User Data Policy

1. Overview

This Google User Data Policy supplements the Onyx Privacy Policy. It applies when you connect a Google account to Onyx through the Google Calendar integration. For Google user data, where this policy and the Privacy Policy differ, this policy controls.

2. What We Access

When you connect Google Calendar, you choose which of your calendars Onyx reads and which one calendar Onyx adds appointments to. With your permission, Onyx accesses:

  • Your Google account email address, to confirm it matches your Onyx login

  • The list of calendars on your Google account (name, ID and your access level), so you can choose calendars

  • Events on the calendars you select, from today through the next 90 days: start and end time, title, description, whether you organize the event, and your response to it. For events marked private in Google, Onyx stores only the time and shows the title "Busy"

  • Events Onyx creates on the calendar you choose for Onyx appointments

Onyx does not access your email, contacts, files or any other Google service, and does not store event guest lists or attachments.

3. How We Use It

  • To show your Google events in your Onyx calendar and treat them as busy time, so that you, people in your organization who schedule for you, and Onyx's automated scheduling assistants do not book appointments over them

  • To add, update and remove events on the Google calendar you choose for appointments booked in Onyx, including appointments booked by Onyx's AI voice and text assistants. These events contain the appointment title and a link to the appointment in Onyx. They do not contain client phone numbers, dates of birth or notes

  • To change the time of an event you organize when you reschedule it in Onyx. Google then notifies the event's guests

We use Google user data only to provide these features to you.

4. Who Can See It

Your imported Google events are visible in Onyx to you and to users in your organization who have permission to view your calendar. Onyx's API and MCP connector show your Google events only as "Busy" with their times, without titles or descriptions.

Onyx personnel do not read your Google user data unless you ask us to for support, it is needed for security or to investigate abuse, or the law requires it.

5. What We Do Not Do

  • We do not sell Google user data

  • We do not use or transfer it for advertising, including retargeting or interest-based ads

  • We do not use or transfer it to determine credit-worthiness or for lending

  • We do not use it to create, train or improve AI or machine learning models

  • We do not transfer it to data brokers or other third parties, except to the service providers that host and operate Onyx for us, such as Amazon Web Services, under confidentiality obligations; to comply with law; or as part of a merger, acquisition or sale of assets, and then only after obtaining your explicit consent

These limits also apply to data aggregated, anonymized or derived from Google user data. The Privacy Policy's section on Platform Improvement and Deidentified Data does not apply to Google user data.

6. Storage and Security

Google access and refresh tokens are encrypted at rest. Google user data is encrypted in transit and stored on Onyx's infrastructure in the United States.

7. Retention and Deletion

Onyx refreshes your imported events every few minutes and keeps them in step with your Google calendars. Imported events are deleted from Onyx when you stop reading a calendar or disconnect.

To disconnect, go to My Profile → Integrations → Google Calendar → Disconnect. Disconnecting revokes Onyx's access at Google and deletes your tokens and imported events. Copies in our encrypted backups are removed as those backups expire on their normal cycle. Events Onyx added to your Google calendar stay there until you delete them.

You can also remove Onyx's access at myaccount.google.com/permissions. If your Onyx user is deactivated, Onyx revokes its access the same way. To ask us to delete any remaining Google user data, email compliance@onyxplatform.com.

8. Changes to This Policy

If we change how we use Google user data, we will tell you and ask for your consent before using it in the new way. We will post any revised version of this policy on this page with an updated date.

9. Google API Services User Data Policy

Onyx's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

10. Contact Us

Questions about this policy or Onyx's use of Google user data: compliance@onyxplatform.com