Privacy Policy
Last updated: August 26, 2026
At Wenzy, we handle personal, operational, and integration data, including information received from Google Workspace APIs, under principles of transparency, confidentiality, security, and data minimization. This policy explains what data we access or collect, how we use, store, share, and delete it, and what controls you have when using our hospitality automation platform.
1. Data we collect
We may collect account and contact details, hotel business information, integration settings, content processed within the platform, and technical usage data required to operate, maintain, and protect the service.
2. How we use information
We use information to provide the platform, respond to requests, automate guest and booking workflows, sync integrations, improve product reliability, prevent abuse, and comply with legal or contractual obligations.
3. Google Workspace and Google Calendar data we access
When an authorized administrator connects Google Calendar, Wenzy accesses the account's primary email; the primary calendar identifier, name, timezone, and capabilities; free/busy availability without retrieving titles, descriptions, or content from unrelated events; and Agenda-managed events, including their identifiers, status, date, time, attendees, and Google Meet or Calendar links. We also receive OAuth access and refresh tokens to maintain the authorized connection.
4. How we use Google data
We use Google data exclusively to verify the organizer account, check availability, validate the calendar and its timezone, create Google Meet links, create, synchronize, reschedule, and cancel meetings, add attendees, display Agenda status, and send related notifications. We do not use unrelated event content or Google data for secondary purposes that are incompatible with these user-visible features.
5. Google data storage and security
OAuth access and refresh tokens are encrypted at rest with separate, versioned keys. Data is transmitted over HTTPS, secrets are kept out of source code, access is restricted through authorized roles, and credentials are redacted from operational errors and logs. We retain only the calendar and event identifiers, synchronization state, meeting data, and links required to provide and protect the service.
6. Disclosure, transfers, and human access
We do not sell, rent, or transfer Google data to advertising platforms, data brokers, or information resellers, and we do not use it for advertising, retargeting, credit assessment, or lending. Meeting details are shared only with the organizer and attendees, and with providers acting on Wenzy's behalf when essential to host the platform, deliver notifications, protect the service, or comply with law. We do not allow humans to read Google data except with explicit consent for support, for security, to comply with law, or when data is aggregated and anonymized for internal operations.
7. Google Limited Use and AI models
Wenzy's use of information received from Google Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements. We do not use or transfer Google Workspace or Google Calendar data to create, train, improve, or fine-tune generalized or non-personalized artificial intelligence or machine-learning models. We do not build independent databases or permanent copies of Google data for purposes outside the user-authorized Agenda features.
8. Retention, disconnection, and deletion
We retain OAuth tokens while the integration remains active. When Google Calendar is disconnected, Wenzy stops future access, initiates grant revocation, and deletes encrypted token copies after revocation completes. Local meeting records are not automatically deleted on disconnection and are retained until manual deletion or anonymization, or as needed to provide the service, meet legal or contractual obligations, resolve incidents, and maintain security audit records. You can remove access from your Google Account and request deletion of data controlled by Wenzy through our Data Deletion page or by emailing info@wenzy.co.
9. AI, conversations, and ownership of other data
Content processed by our AI agents is used to deliver the services contracted by the customer. We do not use hotel and guest conversations to train public third-party models. Unless required by law, operational context and business data remain under the customer's control. This section does not expand the permitted use of Google data, which is governed by the specific restrictions above.
10. Site analytics and cookies
We use Microsoft Clarity to analyze interactions with public pages and improve the experience. Clarity may use cookies or other measurement technologies. Google Workspace data obtained through OAuth is not sent to Clarity.
11. Changes to this policy
We will keep this policy current. If we change how we access or use Google data, we will notify users before applying the new use and obtain renewed consent when required.
12. Your rights and contact
You may request access, correction, deletion, anonymization, or information about your data by emailing info@wenzy.co. We will verify the requester's identity and handle each request under the applicable contractual relationship and law.
Data deletion requests
If you need to revoke an integration or delete data received from Google Workspace, Google Calendar, Facebook Login, Meta, or another connected source, use our public data deletion request page. It explains the process, required information, and contact channel.
Request data deletionRelated legal pages
Other language versions