Privacy Policy

Last updated: April 20, 2026

    The short version: Mergeday reads your Google Calendar to show you a merged view. We never store your calendar data, never share it with anyone, and can never modify or delete your events.
  

What Mergeday does

Mergeday is a calendar merging tool that connects two Google Calendar accounts and displays them in a single unified view. It automatically detects scheduling conflicts between the two calendars and helps you draft reschedule messages.

What data we access

When you connect a Google Calendar account, Mergeday requests read-only access to your calendar events. Specifically, we access:

Your calendar event titles, start times, and end times
Your Google account email address (to display which accounts are connected)

We do not access your email, contacts, Google Drive, or any other Google services.

What data we store

Mergeday does not store your calendar events. Events are fetched in real time when you open the app and are never written to a database or saved to disk.

We store your OAuth access tokens in an encrypted server-side session so you stay connected between visits. These tokens allow us to fetch your calendar data on your behalf. You can revoke this access at any time by disconnecting your account in the app or through your Google Account settings.

What we never do

We never create, edit, or delete calendar events
We never share your calendar data with third parties
We never sell your data
We never use your calendar data for advertising
We never store calendar event content beyond your active session

Google API scopes

Mergeday uses the following Google API scopes:

https://www.googleapis.com/auth/calendar.readonly — read-only access to your calendar events
https://www.googleapis.com/auth/userinfo.email — read your email address so we can display which account is connected

Mergeday's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Data security

All data is transmitted over HTTPS. OAuth tokens are stored in encrypted server-side sessions and are never exposed to the browser or third parties.

Data retention

Session data (including OAuth tokens) is cleared when you disconnect your account or when your session expires. We do not retain any personally identifiable information after your session ends.

Children's privacy

Mergeday is not directed at children under 13 and we do not knowingly collect data from children.

Changes to this policy

We may update this privacy policy from time to time. We will notify users of material changes by updating the date at the top of this page.

Contact

If you have questions about this privacy policy or how Mergeday handles your data, contact us at brittany@alittle.agency.