Privacy Policy

Last updated: May 19, 2026

Overview

DemoTimer (“we”, “us”, “our”) provides automated meeting reminders for sales professionals. This Privacy Policy explains what data we collect, how we use it, and how we protect it.

Data we collect

Account information. When you sign up with Google, we receive your name, email address, and profile picture. We use this to create and identify your account.

Calendar data. We request read-only access to your Google Calendar. We access upcoming events to identify external Zoom meetings. We never modify, create, or delete your calendar events.

Meeting metadata. For meetings that qualify for reminders, we temporarily store the meeting title, start and end time, and Zoom URL. This data is used solely to schedule the reminder bot and is automatically purged after 30 days.

OAuth tokens. We store your Google OAuth access and refresh tokens to maintain calendar access. These tokens are encrypted at rest using AES-256-GCM encryption.

Payment information. Payments are processed entirely by Stripe. We never see, store, or handle your credit card number. We store only your Stripe customer ID and subscription status.

Data we do not collect

We do not record, transcribe, or access any audio, video, or screen content from your meetings. The reminder bot joins the Zoom waiting room briefly and leaves within seconds. Its only function is to trigger the notification chime.

How we use your data

We use your data exclusively to:

  • Identify upcoming external Zoom meetings on your calendar
  • Schedule reminder bots at the correct time
  • Display your upcoming and past meetings in your dashboard
  • Manage your subscription and billing
  • Respond to support requests

We do not sell, share, rent, or trade your personal data with third parties for advertising or marketing purposes.

Third-party services

We use the following third-party services to operate DemoTimer:

  • Google– OAuth authentication and Calendar API (read-only)
  • Supabase– Database hosting with encrypted connections
  • Vercel– Application hosting with automatic TLS
  • Stripe– Payment processing (PCI-DSS Level 1 certified)
  • Recall.ai– Bot scheduling for Zoom meeting reminders

Data retention

Meeting metadata (title, time, Zoom URL) is automatically purged 30 days after the meeting ends. Your account information and preferences are retained as long as your account is active. If you delete your account, all associated data is removed within 30 days.

Your rights

You can at any time:

  • Disconnect your Google Calendar from DemoTimer settings
  • Revoke access from your Google account permissions
  • Request a copy of your data by emailing us
  • Request deletion of your account and all associated data

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the DemoTimer dashboard. Continued use of DemoTimer after changes constitutes acceptance of the updated policy.

Contact

If you have any questions about this Privacy Policy or how we handle your data, contact us at sam@demotimer.com.