1. OVERVIEW Monstersgate ("Platform," "we," "us," "our") uses Google Calendar APIs to enhance the mentorship experience by enabling instructors to automatically schedule mentoring sessions and generate Google Meet conference links. This Privacy Policy explains how we collect, protect, use, and manage your data when you authorize our application to access your Google Calendar.
2. DATA COLLECTION AND GOOGLE CALENDAR SCOPES When you connect your Google Calendar to Monstersgate, we request the following minimum scopes necessary for the integration to function:
calendar.events: To create, manage, and update mentoring session events and Google Meet links on your primary calendar.
userinfo.email: To retrieve your email address for user identification and event attendee management.
We do not request or access full calendar histories, personal events, or any calendars other than the one used for Monstersgate scheduling.
3. HOW WE USE YOUR DATA Your Google Calendar data is strictly used for the following authorized purposes:
Automatic Event Creation: Creating calendar events when mentoring sessions are booked, including the session time, student email, and meeting details.
Event Updates: Modifying or canceling the calendar event if session details change on the platform.
Availability Verification: Confirming your calendar is properly connected to avoid scheduling conflicts.
We explicitly do not:
Use your calendar data for advertising, recommendation algorithms, or marketing.
Share your calendar data with other platform instructors or students (except the specific student attending the session).
Store calendar event details beyond the lifecycle of the session and a standard audit period.
Sell or license your calendar information to any third parties.
4. DATA PROTECTION AND SECURITY We implement enterprise-grade security to protect your data. All Google authentication credentials (such as refresh tokens) are encrypted at rest in our database using AES-256-GCM encryption. Access to these tokens is strictly isolated per instructor. Our platform communicates with Google's APIs exclusively over secure, HTTPS/TLS-encrypted connections. Tokens are never exposed in the user interface, cached in local storage, or accessible by platform administrators.
5. DATA RETENTION AND DELETION We retain your Google authentication tokens and associated email addresses only for as long as you maintain an active connection between Monstersgate and your Google Calendar.
When you choose to disconnect your Google Calendar:
Your refresh token is immediately revoked with Google APIs.
All stored credentials are permanently cleared from our database.
The platform's capability to create events on your behalf is instantly disabled.
6. THIRD-PARTY SHARING Monstersgate does not share, transfer, or disclose your Google Calendar data to any third parties, other than Google LLC as required to facilitate the API integration. The creation of events is governed by Google's Privacy Policy.
7. YOUR RIGHTS AND CONTROLS You have complete control over your Google Calendar integration:
Disconnect Anytime: You can disconnect your calendar via your Monstersgate settings at any time, which instantly revokes our access.
Google Security Settings: You may also revoke Monstersgate's access directly from your Google Account settings (myaccount.google.com/permissions).
Data Deletion: You may request a complete export or deletion of your platform data by contacting our privacy team.
8. CONTACT US If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact us at: Email: [email protected]