FlyerSync

Privacy Policy

Last Updated: March 2026

1. Introduction

Welcome to FlyerSync ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This privacy notice explains how we collect, use, and protect your information when you use our web application to extract details from flyers and create calendar events via Google Calendar or .ics file download.

2. Limited Use of Google User Data

FlyerSync's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. FlyerSync uses Google user data only to provide and improve the app functionality described in this Privacy Policy. We do not use Google user data for any other purpose, including advertising, sale, rent, licensing, profiling unrelated to app functionality, or building independent user profiles outside the app.

Specifically, FlyerSync's use of Google user data is limited to the following:

  • Providing the FlyerSync calendar-insert feature — the sole purpose for which Google user data is accessed.
  • Event creation: We use the `calendar.events` scope strictly to write the single calendar event generated from the flyer you upload directly into your primary Google Calendar when you tap the insert button. We do not read, list, modify, or delete any other events or calendars.
  • Account identification: We access your email address only to identify which FlyerSync account connected the calendar so that future scan events can be saved to that same account on request. This is part of providing the calendar-insert feature, not a separate purpose.
  • Security and integrity: We may log minimal request metadata (timestamps, OAuth token IDs) to detect abuse, protect accounts, and comply with Google's Limited Use security requirements.
  • Human review of Google user data: FlyerSync does not allow humans to read Google user data unless: (a) you have given us specific consent, (b) it is necessary for security purposes such as investigating abuse, or (c) it is required by law.
  • Transfer of Google user data: FlyerSync does not transfer Google user data to third parties except as required to provide the calendar-insert feature (for example, sending your selected flyer event to your Google Calendar) or as required by law.

3. How We Use and Protect Your Data

We use your Google user data only to provide and improve the core FlyerSync service: extracting event details from the flyer images you upload and creating the corresponding calendar event on your behalf.

  • We do not sell, rent, or share your Google user data with unauthorized third parties.
  • Security procedures are in place to protect the confidentiality of your Google user data. FlyerSync uses industry-standard safeguards, including TLS encryption in transit, encrypted storage at rest, HTTP-only secure cookies for session tokens, principle-of-least-privilege access controls on internal systems, and continuous monitoring for unauthorized access.
  • Access tokens are securely stored in HTTP-only, encrypted cookies during your session and are not exposed to the client browser.
  • Uploaded flyer images are processed by Anthropic, Inc.'s Claude API. We send the flyer image to Anthropic strictly to extract the event text required for the calendar. Our use of Anthropic is governed by Anthropic's Commercial Terms, which prohibit Anthropic from using your content to train its models. FlyerSync does not retain your uploaded images to train its own models, and the images are not monitored by human agents. No Google user data is included in any payload sent to Anthropic.
  • .ics File Downloads: When you choose the "Apple / Other" option, the .ics calendar file is generated server-side and delivered directly to your device. No calendar data is shared with any third party during this process.

4. Data Retention and Deletion

Data retention. FlyerSync retains personal information only for as long as needed to provide the calendar-insert service or as required by law. Specifically:

  • Google authentication tokens expire naturally and are cleared when you log out.
  • Uploaded flyer images are processed by Anthropic and discarded by FlyerSync after extraction is complete. We do not retain uploaded images beyond the time needed to extract the calendar event.
  • Extracted event records stored in your FlyerSync account are retained while your account is active and the connected Google Calendar remains authorized.
  • Server logs containing minimal request metadata are retained for a rolling 30-day period for security and abuse-prevention purposes.

Deletion on request. You may request deletion of your FlyerSync account and all associated personal data at any time by emailing support@flyersync.com. We will action deletion requests within 30 days. When the data retention period expires for a given type of data, we will delete or destroy it using commercially reasonable procedures. You may also revoke FlyerSync's access to your Google Account directly from your Google Account permissions page at any time.

5. Contact Us

If you have questions or comments about this notice, or wish to delete any internal data, you may email us at support@flyersync.com.