Legal
Privacy Policy
Effective: May 7, 2026
This policy explains what data Meetrays collects, why we collect it, and how we handle it. We've tried to write it in plain language. If anything is unclear, email hello@meetrays.com.
What we collect
When you sign up we collect your email address and (optionally) your name and profile photo. When you connect a third-party calendar (Google, Microsoft 365, Zoom) we receive an OAuth token plus the minimum scopes needed to read your free/busy and create events.
When someone books a meeting on your link, we collect the booker's name, email, timezone, any answers to your custom booking questions, and the chosen time. This information is shown to you (the host) and used to send confirmations, reminders, and cancellation notices.
We log basic technical information — IP address, user agent, request paths — for security and abuse prevention. These logs are retained for a maximum of 30 days unless required for an active investigation.
What we don't collect
- We do not read or store the contents of your calendar events. We only request free/busy ranges.
- We do not sell your personal data, ever, under any circumstances.
- We do not run third-party advertising or tracking pixels on your booking pages.
- We do not train machine-learning models on customer data.
How we use your data
Strictly to operate the product: render your booking page, compute free/busy, create calendar events on your connected calendars, send transactional emails (confirmations, reminders, cancellations), and provide aggregated insights to you about your own bookings.
We may aggregate statistics about overall product usage (e.g. “X% of teams use round-robin”) for our own reporting. These aggregations cannot be used to identify any individual customer or booker.
Subprocessors
We rely on a small set of vendors to operate the service. Each is contractually bound to handle data in line with this policy.
- Database hosting — for storing user accounts, event types, bookings.
- Email delivery (Resend) — for sending transactional emails.
- Authentication providers (Google, Microsoft) — for sign-in and calendar OAuth.
- Cloud hosting — for running the application and database in our hosted infrastructure.
Data retention & deletion
You can delete your account from Settings at any time. Deletion is permanent and cascades to all related data (event types, bookings, calendar tokens, invitations).
Booker-side data attached to canceled or completed bookings is retained for 24 months by default for support and dispute resolution, unless you delete the booking earlier.
Your rights
If you reside in the EU/UK, California, or another jurisdiction with data-protection laws, you have the right to access, correct, port, or delete your personal data. Email privacy@meetrays.com and we'll respond within 30 days.
Changes
We'll post any material changes to this policy here at least 30 days before they take effect, and email you at the address on file.