PRIVACY

Privacy policy

Last updated September 20, 2026

Website enquiries and accounts

When you contact Apex Voice, we use the information you provide to respond to your enquiry and manage the requested service. Do not submit sensitive medical, financial or emergency information. Our client portal uses account identity, workspace membership and assigned roles to control access to business information. Google sign-in requests email and basic profile information for authentication; Calendar access is a separate connection initiated within the workspace.

Calls and service operations

Depending on the configured service, Apex processes call metadata, caller details, operational summaries, transcripts, recordings and service requests. Access is limited by workspace membership and role. Recording, notice and retention requirements depend on the service configuration and applicable law.

Google Calendar: information accessed and why

When an authorized workspace owner connects Google Calendar, Apex requests permission to:

The calendar integration supports owned calendars only. Appointments carry an Apex identifier and are created without guest invitations or automatic event reminders. Appointment details may include the supplied caller name and phone number, service, appointment times and an internal booking reference. The current integration does not offer event deletion or rescheduling, even though Google's owned-event permission can authorize broader actions.

Storage and safeguards

Apex stores the selected calendar identifier, booking rules, connection information and booking records associated with the workspace. Booking records include identifiers, appointment times and status. Refresh credentials are stored encrypted on the server using AES-256-GCM and bound to the workspace. Access tokens are obtained server-side to make authorized Google API requests. Credentials are not returned to the browser. Transport encryption, access controls and workspace isolation help protect information; no service can guarantee absolute security.

Service providers and use of Google data

We use service providers for hosting, authentication, data storage, email and voice operations to deliver the service. Google receives calendar API requests and appointment details. The voice booking workflow receives offered appointment slots, booking outcomes and references; it does not require access to unrelated event descriptions. Google Calendar information is used for the connected scheduling features.

Apex does not sell Google user data, use it for advertising, or use it to train generalized AI models. Apex Voice's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements: Google API Services User Data Policy.

Disconnecting, revoking access and deleting information

Disconnecting Calendar within Apex deletes the workspace's stored Calendar connection, encrypted refresh credential and pending Calendar authorization states, preventing further use through that connection. It does not delete existing Google Calendar appointments or automatically delete booking history. It also does not revoke the Google-account grant, because Calendar and sign-in may share the same OAuth client. You can separately revoke access through your Google Account's third-party connections settings; doing so may affect related sign-in access.

Contact hello@tryapexstudio.com to request access, correction, export or deletion. Some information may need to be retained for security, billing, disputes or legal obligations.

Contact

Questions about privacy or Google Calendar data: hello@tryapexstudio.com.