Privacy Policy

Last updated: May 7, 2026

1. Introduction

WEBii CRM ("we," "our," or "us") operates the WEBii CRM application and related AI Assistant services. This Privacy Policy explains how we collect, use, and protect your information when you connect your Google Calendar to our service.

By using our Google Calendar integration, you agree to the data practices described in this policy.

2. Information We Collect

When you connect your Google Calendar to WEBii CRM, we collect and access the following data:

• Calendar event metadata — Event titles, descriptions, start/end times, attendees, and availability information from your connected Google Calendar(s).
• Calendar event creation data — When the AI Assistant books an appointment on your behalf, it creates events containing the visitor's name, email, and chosen appointment time.
• OAuth tokens — Access and refresh tokens necessary to maintain your calendar connection. These are stored encrypted and used only for API calls to Google Calendar.

3. How We Use Your Information

We use the collected information exclusively for:

• Availability checking — The AI Assistant checks your calendar to determine available time slots when website visitors request appointments.
• Appointment booking — When a visitor selects an available time, the AI Assistant creates a calendar event on your behalf.
• Service operation — Displaying your upcoming events in your CRM dashboard for management purposes.

We do not use your calendar data for advertising, training AI models, or any purpose beyond providing the calendar integration service.

4. Data Sharing and Disclosure

We do not sell your personal information or calendar data. We may share data only in the following circumstances:

• With your consent — When you authorize the connection to your Google Calendar.
• Service providers — With hosting providers (e.g., WebXess, Inc.) who process data on our behalf under strict confidentiality agreements.
• Legal requirements — If required by law, regulation, or legal process.

5. Data Storage and Security

OAuth tokens are stored encrypted in our database using industry-standard encryption. Calendar data accessed via the API is not persistently stored — it is retrieved on-demand when checking availability. Event data created by the AI Assistant is stored as calendar events in your own Google Calendar and as lead records in your CRM dashboard.

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS 1.2+) for all API communications
• Encrypted storage of authentication tokens
• Access controls limiting data access to authorized systems only
• Regular security audits

6. Data Retention and Deletion

OAuth tokens are retained until you explicitly disconnect your calendar via the CRM dashboard. When you disconnect, tokens are immediately deleted from our systems. Calendar event data created through bookings is retained as part of your CRM records unless you manually delete those records.

You may revoke access at any time by:

1. Disconnecting your calendar in the CRM Calendar Settings page, or
2. Revoking access via your Google Account permissions page

Upon account deletion or service cancellation, all associated data is purged within 30 days.

7. Limited Use Disclosure

WEBii CRM's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

8. Contact Information

For questions about this Privacy Policy or data practices, contact us at:

WEBii CRM
Email: crmwebii@gmail.com
Web: https://crm.webii.net

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the CRM dashboard. Continued use of the service after changes constitutes acceptance of the updated policy.