Privacy Policy

1. Overview

Burnmeter is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data when you use the Burnmeter meeting cost analysis Service.

2. Data We Collect

We collect only the data necessary to provide the Service:

• Account information: Your name, email address, and profile picture from Google OAuth sign-in
• Employee data: Names, roles, and salary information you manually enter for your team members
• Meeting data: Meeting titles, dates, durations, and attendee lists you create or import
• Google Calendar data (optional): When you grant calendar access, we read timed event metadata (title, start/end time, attendee list, and conference information when available) to import meetings. We do not store your full calendar or event details beyond what is needed to create a meeting record.

3. How We Use Your Data

Your data is used exclusively to:

• Authenticate you and maintain your account
• Calculate meeting costs based on attendee salary data
• Display meeting history and analytics in your dashboard
• Power AI-assisted insights about your meeting patterns (using the Anthropic API, where data is processed but not stored by Anthropic beyond the request)

We do not sell, rent, or share your data with third parties for marketing purposes.

4. Google API Usage

Burnmeter uses Google OAuth 2.0 for sign-in and, optionally, the Google Calendar API (read-only) to import timed Calendar events and identify Google Meet conferences when available. Our use of Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: data obtained from Google APIs is used only to provide and improve the Burnmeter Service, is not transferred to third parties except as necessary to provide the Service, and is not used for advertising.

You can revoke Burnmeter's Google permissions at any time at myaccount.google.com/permissions.

5. Data Storage and Security

Your data is stored in a PostgreSQL database. We use JWT-based authentication with secure token expiry. We take reasonable technical measures to protect your data, but no system is completely secure and we cannot guarantee absolute security.

Google access tokens are used transiently to import calendar data and are not persisted in our database.

6. Data Retention

We retain your account and meeting data for as long as your account is active. You can delete individual meetings from the Meetings page. To request full account deletion, contact us via the Burnmeter project page.

7. Your Rights

Depending on your location, you may have rights to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing

To exercise these rights, please reach out via the Burnmeter project page.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions or concerns about this Privacy Policy, please reach out via the Burnmeter project page.