Privacy Policy

VGA Labs ("we", "us", "our") operates the website at vgalabs.ai and related services. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using our services you agree to the practices described here.

Information you provide directly: name, email address, phone number, company, and the content of any message you send through our contact form or by email.

Information from Google sign-in and Google Calendar (when you choose to connect): your basic Google profile (name, email) and, if you grant Calendar scopes, your calendar list, events within the requested time window, and the ability to create, update, and delete events on calendars you select. See the "Google Calendar data" section below for full details.

Information collected automatically: standard server logs (IP address, browser, pages requested, timestamps) used for security and basic analytics.

To operate, maintain, and improve our services; to respond to your inquiries; to send service-related communications; and to comply with legal obligations.

VGA Labs's use and transfer to any other app of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: (1) we only use Google user data to provide and improve the user-facing features described in this policy; (2) we do not use Google user data for serving advertisements; (3) we do not allow humans to read Google user data unless we have obtained your explicit consent for specific messages, it is necessary for security purposes (e.g., investigating abuse), or to comply with applicable law; (4) we do not transfer Google user data to third parties except as necessary to provide or improve the user-facing features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.

Policy URL: https://developers.google.com/terms/api-services-user-data-policy

If you connect your Google Calendar to VGA Labs, our AI agent accesses your calendar to book, reschedule, and cancel appointments on your behalf based on conversations with your customers on WhatsApp and Instagram.

Data accessed: (a) the list of your calendars (so you can select which calendar the agent writes to); (b) existing events within the time range a customer is asking about (read on-demand to avoid double-booking); (c) events that the agent itself creates, updates, and deletes during a booking flow.

Data we store: only the OAuth refresh token (encrypted at rest using AES-256) and the event IDs of appointments the agent has created in your calendar. We do not mirror, export, or cache calendar contents in our database. Event reads are performed on-demand and discarded after the agent replies.

Retention: refresh tokens and stored event IDs are retained while your Google Calendar integration remains connected. When you click Disconnect in the VGA Labs dashboard, we immediately revoke the token via Google's oauth2.revoke endpoint and delete it from our systems.

You may also revoke access at any time directly from your Google Account at https://myaccount.google.com/permissions.

We do not sell your personal information. We share information only with service providers (sub-processors) who help us operate the service under confidentiality obligations, or when required by law.

We retain personal information only for as long as necessary for the purposes described in this policy, or as required by law. You may request deletion at any time using the contact details below.

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and you may withdraw consent where consent is the basis for processing. To exercise these rights, contact vgalabsai@gmail.com.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure.

Our services are not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us so we can remove it.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date.

Questions about this policy? Email vgalabsai@gmail.com.