1. Information We Collect

We collect information you provide directly, information made available through integrations you enable, information contained in scheduling communications sent to Gumdrop, information provided by guests and other meeting participants, and technical or usage information generated through use of the Services.

Account and profile information

When you create or use a Gumdrop account, we may collect information such as your name, email address, profile information, authentication information, account settings, time zone, scheduling preferences, and information you provide to customer support.

Calendar information

When you connect a supported Google or Microsoft calendar, Gumdrop may access calendar information made available through the permissions you authorize, including availability, events, time zones, attendees, and event updates. Gumdrop uses this information to coordinate, create, modify, and manage meetings through the Services.

Scheduling emails and conversations

When Gumdrop is copied on or otherwise included in an email conversation for scheduling, Gumdrop processes the messages that are sent to or include Gumdrop. Gumdrop does not use this scheduling functionality to access unrelated email conversations that Gumdrop has not been included on.

To maintain conversational context and provide the scheduling assistant, Gumdrop retains plain-text content extracted from scheduling messages in its conversational system. Gumdrop may also retain the underlying email messages in encrypted storage. The conversational text may be used to provide full context to the AI systems that power the scheduling assistant.

This scheduling-email functionality is separate from general access to a user's email inbox. Gumdrop only processes email conversations sent to or including the scheduling assistant as part of this functionality.

Guest and non-user information

You may interact with Gumdrop without creating a Gumdrop account, for example when a Gumdrop user includes you in a scheduling conversation, invites you to a meeting, or sends you a Gumdrop booking page. In those circumstances, we may collect your name, email address, information about meetings or scheduling conversations in which you participate, and scheduling-related information necessary to coordinate the meeting.

If you complete a Gumdrop booking form, we may collect the information you submit, including your name, email address, availability, and answers to questions included in the booking form.

Payment information

If you purchase a paid Gumdrop plan, payment transactions are processed by Stripe or another payment processor. Gumdrop may receive transaction and subscription information from the processor, but payment-card information is handled by the payment processor in accordance with its own privacy practices.

Analytics, advertising, and communications data

We may collect technical and usage information such as IP address, device and browser information, referring pages, interactions with the Services, events, session information, and attribution data. We may use service providers and technologies including Segment, Google Analytics, Meta advertising technologies such as the Meta Pixel and Conversions API, and Customer.io to support analytics, attribution, advertising measurement, onboarding, lifecycle communications, and product communications.

2. How We Use Information

We use personal information to:

• provide, operate, and maintain Gumdrop;

• understand scheduling requests and coordinate meetings;

• determine availability and scheduling options using connected calendars and information provided in scheduling conversations;

• communicate with users, guests, and meeting participants as needed to complete scheduling;

• create, modify, and manage calendar events;

• operate booking pages and process responses submitted through them;

• provide AI-powered scheduling functionality and maintain conversational context;

• process subscriptions and payments;

• send service, onboarding, lifecycle, product, and, where permitted, marketing communications;

• measure product usage, attribution, and the effectiveness of our marketing;

• improve, secure, troubleshoot, and develop the Services; and

• comply with legal obligations and protect Gumdrop, our users, and others.

  
  

3. Artificial Intelligence

Gumdrop uses artificial intelligence, including large language models, to interpret scheduling conversations and generate or take scheduling-related actions. Information necessary to provide these features, including scheduling-related message content and meeting context, may be processed by AI service providers acting on Gumdrop's behalf.

These providers process information to support Gumdrop's functionality and are not permitted to use Gumdrop data for unrelated advertising or marketing purposes. AI-generated outputs may not always be accurate, complete, or error-free.

4. How We Share Information

Gumdrop does not sell or rent personal information. We may disclose information in the following circumstances:

• Service providers. We share information with vendors that help us operate the Services, including cloud infrastructure, AI, analytics, communications, customer engagement, advertising measurement, security, and payment providers.

• Meeting participants. Information necessary to coordinate a meeting may be shared with organizers, invitees, or other participants, such as names, email addresses, proposed times, availability responses, booking-form responses where appropriate, and meeting details.

• Legal and safety purposes. We may disclose information when required by law, legal process, or government request, or when reasonably necessary to protect rights, safety, security, or prevent fraud or abuse.

• Business transactions. Information may be transferred in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business.

  
  

5. Google and Microsoft Integrations

When you connect Google or Microsoft services, Gumdrop accesses and processes information made available under the permissions you authorize to provide scheduling functionality. You can revoke Gumdrop's access through the applicable provider's account settings.

Gumdrop's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Storage and Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain scheduling and conversational context, comply with legal obligations, resolve disputes, enforce agreements, and protect the security and integrity of the Services.

Scheduling message text retained in Gumdrop's conversational system may be retained for the life of the relevant account or relationship so that Gumdrop can maintain conversational context. Underlying email messages may also be retained in encrypted storage. Guest and non-user information, including names, email addresses, meeting participation information, and information submitted through booking forms, may be retained as part of Gumdrop's scheduling and meeting records.

When an account is deleted, associated account data is generally removed from active systems within thirty days, subject to information that we are permitted or required to retain for legal, security, fraud-prevention, dispute-resolution, backup, or other legitimate purposes. Backup files and security logs may be retained for limited additional periods, typically up to ninety days. Some information relating to guests, other users, or shared meetings may remain where it forms part of another user's records or is otherwise necessary to maintain the integrity of the Services.

7. Data Security

Gumdrop uses industry-standard technical and organizational measures designed to protect information. Data is encrypted in transit using TLS and at rest using AES-256 or equivalent technology. Access to personal information is restricted through role-based access controls and monitored for unauthorized activity. We also conduct regular audits, security reviews, and penetration testing.

No system can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their account credentials and should notify Gumdrop promptly if they suspect unauthorized account activity.

8. Your Privacy Rights and Choices

Depending on where you live, you may have rights to request access to, correction of, deletion of, or portability of certain personal information, or to object to or restrict certain processing. You may also withdraw consent where processing is based on consent.

You may revoke Gumdrop's access to connected Google or Microsoft accounts through the applicable provider's settings. You may unsubscribe from marketing emails using the unsubscribe mechanism in those messages; we may continue to send transactional or service-related communications.

California residents may have additional rights under applicable California privacy laws. Gumdrop does not sell personal information. To exercise a privacy right or ask a question about information Gumdrop holds about you, including if you interacted with Gumdrop as a guest without creating an account, contact hello@gumdrop.ai.

9. Cookies, Analytics, and Advertising

Gumdrop and its service providers may use cookies, pixels, APIs, and similar technologies to operate the Services, remember preferences, understand usage, measure marketing performance, and support advertising and attribution. These technologies may collect identifiers, device and browser information, IP address, referring URLs, interactions, and conversion events.

Where required by applicable law, Gumdrop will obtain consent or provide choices regarding non-essential cookies and similar technologies.

10. International Data Transfers

Because Gumdrop operates globally, personal information may be processed in countries other than your country of residence, including the United States. Where required, we rely on recognized legal mechanisms for international transfers.

For users in the European Economic Area, United Kingdom, and Switzerland, Gumdrop participates in the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework, as applicable. Where those frameworks do not apply, we may use Standard Contractual Clauses or other appropriate transfer mechanisms.

11. Children's Privacy

Gumdrop is not intended for children under sixteen (16), or the minimum age required by applicable local law if higher. We do not knowingly collect personal information from children in violation of applicable law. If we learn that such information has been collected, we will take appropriate steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, practices, technologies, or legal requirements. When required, we will provide notice of material changes by email, through the Services, or on our website. The date at the top of this Privacy Policy indicates when it was last updated.

13. Contact Us

If you have questions, concerns, complaints, or requests regarding this Privacy Policy or Gumdrop's privacy practices, contact us at:

Gumdrop, Inc.
6 Liberty Square #6091
Boston, MA 02109 US
Email: hello@gumdrop.ai
Website: gumdrop.ai