← Back to SAYWork

Privacy Policy

Effective date: 3 July 2026

SAYWork (“SAYWork”, “we”, “us”) is a team workspace that combines a shared calendar, tasks, and messaging for invited members of a team. This policy explains what data we access, how we use it, and the choices you have — with particular attention to the Google Calendar data the app can access on your behalf.

Information we access

• Account information. The email address you sign in with, and your workspace profile (display name, role) within SAYWork.
• Workspace content. The events, tasks, and messages you and your team create inside SAYWork.
• Google Calendar (only if you connect it). If you choose to connect Google Calendar, we request the https://www.googleapis.com/auth/calendar.events scope so the app can create, update, and delete calendar events that mirror your SAYWork schedule. We do not read your other calendars, contacts, email, or files.

How we use Google Calendar data

Connecting Google Calendar is optional. When connected, we use the access only to export your SAYWork events into your own Google Calendar — creating, updating, or removing the corresponding calendar events so the two stay consistent. We do not use Google Calendar data for advertising, and we do not sell it.

Google API Services — Limited Use disclosure

SAYWork’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide and improve the calendar-export feature you enabled, do not transfer it to others except as needed to provide that feature or as required by law, and do not use it for advertising or human review except as permitted by that policy.

How data is stored

• Access tokens are short-lived and not persisted.The Google access token is held only in your browser’s memory for the current session and is never written to our servers.
• Event links. To avoid creating duplicate calendar entries, we store a mapping between a SAYWork event and the Google event it created (identifiers only) in our database (Supabase), scoped so only you can access your own links.
• Workspace data is stored in Supabase with row-level security so members only see what their role permits.

Sharing

We do not sell your data. We share it only with the infrastructure providers that run SAYWork (Google, Supabase, and our hosting provider) to the extent needed to operate the service, or where required by law.

Your choices

• You can disconnect Google Calendar at any time from within SAYWork.
• You can revoke SAYWork’s access to your Google Account at myaccount.google.com/permissions.
• You can request deletion of your SAYWork account and associated data by contacting us.

Contact

Questions about this policy or your data? Email us at support@saysheji.my.