Privacy policy

Last updated October 31, 2026

Pozhuthu helps groups share when they're free and schedule meetings. This policy explains what we collect, why, and the choices you have. We don't sell your data, show ads, or use your data to train AI models.

What we collect

• Account details: your name, email address, time zone and a hashed password. If you sign in with Google or Microsoft, we receive your name, email address and profile picture from them.
• What you enter: your weekly availability, date-specific changes, groups you create or join, invitations, events you schedule and your replies to them.
• Connected calendars (optional): if you connect a Google or Outlook calendar, we store the account's email address, encrypted access tokens, and the start and end times of your busy periods for roughly the next 60 days. We never store the titles, descriptions, locations or attendees of your own calendar events.
• Technical data: session cookies to keep you signed in, and short-lived server logs (IP address, browser, errors) used for security and troubleshooting.

How we use Google and Microsoft calendar data

When you connect a calendar, we ask for permission to:

• Read your free/busy times (Google calendar.freebusy, Microsoft Calendars.ReadWrite) so we can remove busy periods from the availability your groups see. Group members see only that you are free or not free at a given time — never why.
• Manage events we create (Google calendar.events, Microsoft Calendars.ReadWrite) so that group meetings you accept are added to your calendar, and updated or removed if you change your reply or the meeting is cancelled. You can turn this off per calendar. We also register for change notifications so your availability stays up to date.

Pozhuthu's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google and Microsoft user data only to provide the features described above. We don't transfer it to others except as needed to provide the service, comply with law, or as part of a merger or acquisition with notice to you; we don't use it for advertising; and no person reads it unless you ask us to for support, it's needed for security, or the law requires it.

Who can see your information

• Members of your groups see your name, email address, time zone, when you're free, and your replies to group events.
• Service providers who process data on our behalf: Cloudflare (hosting and database) and Resend (sending email). They may not use it for anything else.
• Authorities, only when the law requires it.

Security

All traffic is encrypted with HTTPS. Calendar access tokens are encrypted at rest with AES-256-GCM. Passwords are hashed and never stored in plain text.

Keeping and deleting your data

• Disconnect a calendar on the Calendars page at any time. We revoke our access with Google or Microsoft and immediately delete that calendar's tokens and busy times. Events we already added to your calendar stay there for you to keep or delete. You can also revoke access from your Google Account or Microsoft account.
• Delete your account on the Profile page. This permanently deletes your account, availability, calendar connections, replies and any groups you own alone.
• Busy times are replaced at every sync, so past ones don't pile up. Server logs are kept for at most 7 days.

Changes and contact

If we change this policy in a meaningful way we'll update the date above and tell signed-in users. Questions or requests: ajaysaiux@gmail.com.