Privacy

Last updated August 2026

Darwin is a scheduling assistant. This page explains, plainly, what we collect, exactly how each piece of Google user data is used, how it is protected, and how to make it all go away.

Google user data we access, and exactly how each item is used

Signing in with Google grants Darwin two narrow Calendar permissions and your basic profile. Each is used for one purpose:

• Manage events on calendars you own (calendar.events.owned) — we read the events on the calendars you selected in Settings to work out when you are genuinely free (full details are required: free/busy intervals alone cannot tell an accepted meeting from an invitation you ignored, or a block you marked "free"), and we create the calendar event for a meeting you asked Darwin to arrange (including its Google Meet link), moving or cancelling that same event when the participants reschedule. Event titles, attendees, and contents never leave the availability computation — the only calendar-derived information ever shown to meeting participants is the proposed times themselves. Darwin never shares, deletes, or reorganizes calendars, and never writes events beyond the scheduling you asked for.
• List your calendars (calendar.calendarlist.readonly) — your Settings page shows your calendars as checkboxes so you can choose which ones count toward your availability. This list is displayed to you and used for nothing else.
• Name and email address (sign-in) — to identify your account and route mail on your threads to your assistant.

Google user data is used solely to provide these scheduling features to you. We do not use it for advertising, do not sell it, and do not transfer it to anyone except the sub-processors below as needed to operate the service, as required by law, or as part of a merger or acquisition with prior notice to you.

Email you send to your assistant address

Messages you CC to your @darwinschedules.com address are delivered to a mailbox we operate, and their contents are used to do the scheduling you asked for. We never request access to your own Gmail or inbox.

What we store

Your name, email address, timezone, the preferences you write, the threads your assistant is working on, the emails it sent, the meetings it booked, and a log of the assistant's decisions so you can audit them.

AI, and Google's Limited Use requirements

Darwin composes its replies with a large-language-model API (Anthropic's Claude). The content of a scheduling thread and the availability windows relevant to that request are processed by that API to draft responses and decide scheduling steps — nothing more.

The use of raw or derived user data received from Google Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements. Google user data — raw, aggregated, or derived — is never used, transferred, or sold to create, train, or improve machine-learning or artificial-intelligence models of any kind, whether ours or a third party's, foundational or otherwise. Our AI sub-processor handles requests under terms that do not permit training on them, and no human reviews model inputs as part of the service. Darwin's use and transfer of information received from Google APIs also adheres to the Google API Services User Data Policy, including its Limited Use requirements.

How sensitive data is protected

• All data is encrypted in transit (TLS/HTTPS everywhere) and encrypted at rest on Google Cloud infrastructure.
• Your Google OAuth token is additionally encrypted at the application layer before it is stored; the decryption key is held in a secret manager, never in the database or the code.
• Each customer's data lives in a physically separate database — reading another account's data is structurally impossible, not merely prohibited.
• Access follows least privilege: the three narrow Calendar permissions above (never full calendar access), and availability is computed from free/busy intervals rather than event contents.
• Production access is restricted to the service operator, and every action the assistant takes — including refusals — is written to an audit log you can inspect on your dashboard.

Retention and deletion

Your data is kept while your account exists. Email support@darwinschedules.com and we will permanently delete your account and all associated data — the account record, message records, your assistant's database, and its backup copy. Revoking Darwin's access in your Google account settings stops all processing of your Google data immediately.

Sub-processors

Google (calendar, sign-in, mail delivery, and cloud hosting on Google Cloud), and Anthropic (the language-model API that drafts messages, under terms that do not permit training on the data).