Privacy policy

How we collect, store, use, and protect your data when you use Tealfeed, including data from the Google integrations you choose to connect.

Tealfeed Private Limited (“Tealfeed”, “us”, “we”, “our”) operates the website tealfeed.ai and the application at app.tealfeed.ai (together the “Site”): a platform where appointment-based service businesses run their operations, including public booking pages (“storefronts”), scheduling and availability, client records, tasks, communications, and payments (collectively the “Services”). This Privacy Policy explains what data we collect, why we collect it, how we protect it, and the choices you have.

By using the Services, you agree to the collection and use of your data in accordance with this Privacy Policy. If you do not agree with this Policy or any part of it, please stop using the Services. Our Terms of Use govern your use of the Services more broadly.

Two kinds of people use Tealfeed

Members are professionals and businesses who create a Tealfeed account to run their practice. Clients are the people who book a Member through a storefront, or whom a Member adds to their client records. This Policy covers both. Where a Member stores their Clients’ information on Tealfeed, the Member is responsible for having collected that information lawfully; we process it only to provide the Services to that Member, as described below.

Data we collect

Information you give us

Account data: your name, email address, and password. Passwords are stored only as salted hashes; we cannot read them.
Business data: your storefront profile, business name, services and pricing, availability schedules, booking policies, articles, and images you upload.
Client records: names, email addresses, phone numbers, locations, companies, notes, and booking history of the Clients you add or who book you. This data belongs to your business; we act on your instructions.
Booking data: when a Client books through a storefront, we collect the details they submit (name, email, answers to booking questions) to create and manage the booking.

Information collected automatically

Usage and log data: IP address, device and browser information, pages visited, and timestamps, used for security, debugging, and understanding how the Services are used;
Essential cookies: a session cookie that keeps you signed in, and similar strictly-necessary storage. We do not use third-party advertising cookies or tracking pixels;
Transaction records: when a payment is made, we record the transaction amount, currency, status, and date. Card details never touch our servers (see Payments below).

Google user data: Calendar and Meet

Tealfeed offers two optional Google integrations. Each is connected separately, shows you Google’s own consent screen before anything is shared, and can be disconnected at any time. We only request the narrowest scopes each feature needs.

Google Calendar

When you connect Google Calendar, we request these scopes and nothing broader:

https://www.googleapis.com/auth/calendar.calendarlist.readonly: lists your calendars, so you can pick which ones to use;
https://www.googleapis.com/auth/calendar.events.readonly: reads events on the calendars you select, so your schedule shows in Tealfeed and busy times cannot be double-booked;
https://www.googleapis.com/auth/calendar.events.owned: lets Tealfeed write events on calendars you own. We use it to create, update, and cancel the events Tealfeed itself writes, and to carry out actions you explicitly take on an event from your Tealfeed calendar: answering an invitation (yes / maybe / no), moving an event, or removing it. Tealfeed never changes an event on its own;
Basic profile (openid, userinfo.email): your email address, used to show which Google account is connected. If you sign in to Tealfeed with Google, that separate sign-in flow also requests userinfo.profile (your name and profile photo).

Your Google Calendar events are read on demand to render your calendar view and compute availability. We do not copy your Google event contents into our database. Outside of the events Tealfeed itself creates, an event is only ever changed when you explicitly act on it from your calendar (answer its invitation, move it, or remove it) · Tealfeed never modifies or deletes an event on its own initiative.

Google Meet

When you connect Google Meet, we request the basic profile scopes (to identify the connected account) and the https://www.googleapis.com/auth/meetings.space.created scope, used exclusively to create Google Meet links for your bookings. Tealfeed cannot read or join meetings it did not create, and this integration has no access to your calendar.

How Google user data is protected

All Google data moves over encrypted connections (HTTPS/TLS);
The OAuth refresh tokens Google issues to Tealfeed are encrypted at rest with a dedicated encryption key before being stored, and are never exposed to your browser or to other users;
Access to production systems is restricted to authorised personnel on a need-to-know basis.

How Google user data is never used

We do not sell Google user data, and we do not share it with advertisers or data brokers;
We do not use Google user data for advertising of any kind;
We do not use Google user data to develop, improve, or train generalised artificial intelligence or machine learning models. Google user data is never transferred to any third-party AI service in raw, aggregated, or derived form;
Google user data is never sent to any AI provider we use. Tealfeed’s AI features are described in AI features below; none of them read your Google Calendar or Google Meet data;
No human at Tealfeed reads your Google data, except with your explicit consent (for example, a support request you initiate), where necessary for security or abuse investigation, or where required by law.

Tealfeed’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access and deleting Google data

You can disconnect Google Calendar or Google Meet at any time from Settings · Integrations inside the app. Disconnecting immediately deletes the stored tokens for that integration;
You can also revoke Tealfeed’s access from your Google Account permissions page;
Deleting your Tealfeed account deletes your stored Google tokens and integration records along with it.

How we use data

To provide the Services: storefronts, scheduling, bookings, client records, tasks, and payments;
To send transactional email on your behalf and to you: booking confirmations, reminders, reschedules, cancellations, and sign-in verification codes. We do not send marketing email to your Clients;
To secure accounts: sign-in verification, session management, fraud and abuse prevention;
To provide support when you contact us;
To understand aggregate usage and improve the Services;
To comply with legal obligations.

We do not use your data for automated individual decision-making that produces legal effects, or profiling.

Your Clients’ data

Client records exist so Members can run their business. We use them only to provide the Services to the Member who holds them: creating bookings, sending booking-related email, and keeping the Member’s records. We never sell Client data, never use it to advertise to Clients, and never contact a Member’s Clients for our own purposes. If you are a Client and want your information corrected or removed, you can contact the business you booked with directly, or email us at contact@tealfeed.com and we will assist.

AI features

Tealfeed ships an assistant, TIA, and a set of AI helpers such as workflow generation. They are part of the Services, they run only when you use them, and they process the data described here.

What TIA can read. TIA answers questions and performs tasks inside your own workspace, so it reads the workspace data needed to do what you asked: your profile and services, availability and bookings, client and company records, tasks, notes, documents, and files you point it at. It works only within the workspace you are signed in to, under the same role permissions you have, and it never reaches into another Member’s workspace. Actions that change or send anything wait for your explicit approval;
Where the reasoning happens. The text of your request, and the workspace data needed to answer it, are sent to Anthropic and processed by its commercial API. Anthropic’s commercial terms do not permit training on customer content. If you turn on research mode, your search query is additionally run through Anthropic’s web-search tool, which means it reaches public search results;
Voice. If you send TIA a voice note or hold a voice conversation, the audio you record is sent to Sarvam AI for speech recognition, and TIA’s spoken replies are generated by Sarvam from the reply text. Voice is optional; if you never use it, no audio leaves your device to Sarvam;
No training on your data. We do not use your data, your Clients’ data, or your Clients’ conversations to train, fine-tune, or improve any general-purpose AI model, ours or anyone else’s. Our AI providers process this data as our processors, to return a response, and for no purpose of their own;
Not a certification. AI output can be wrong. TIA is a working assistant, not professional, legal, medical, or financial advice, and you remain responsible for what you send or publish from it.

Payments

Tealfeed does not collect or store card or bank details. Payments are processed by regulated third-party payment processors, over encrypted connections, directly between you and the processor; we receive only the transaction outcome and reference. Which processor handles a given payment depends on the Member’s settings, their country, and the currency of the booking:

Stripe (privacy policy), Razorpay (privacy policy), and Cashfree (privacy policy), where the Member connects their own processor account and is paid by that processor directly;
Tealfeed Pay, our held-payment option for bookings priced in Indian rupees. The payment is collected on Tealfeed’s platform account through Razorpay Route, held until the booking is honoured, then transferred to the Member. Razorpay is the processor throughout; Tealfeed sees the transaction record, the transfer, and the settlement reference, never your card details.

Each processor is an independent controller of the payment data you give it, and its handling of that data is governed by its own privacy policy.

When we share data

We do not sell personal data. We share it only:

With service providers who help us run the platform: cloud hosting, databases, and file storage; email delivery; messaging, where a Member connects a messaging channel; payment processing (Stripe, Razorpay, Cashfree); and AI processing (Anthropic for the assistant, Sarvam AI for voice). Each is bound to process data only on our instructions;
Between you and the people you do business with: a booking necessarily shares relevant details between the Member and the Client (names, the service, the time, the meeting link);
For legal reasons: where required by law, regulation, legal process, or an enforceable governmental request;
For safety and security: to detect, prevent, or address fraud, abuse, or security issues;
With your consent, for anything else.

International transfer

We operate globally and store data with reputable cloud infrastructure providers whose servers may be located outside your state, province, or country, including in Singapore, the United States, and India. Wherever your data is processed, the protections described in this Policy travel with it.

Data security

All traffic to and from the Site is encrypted (HTTPS/TLS), in every environment;
Passwords are stored as salted hashes; sign-in is protected with email verification codes;
Integration credentials (such as Google OAuth tokens) are encrypted at rest;
Access to personal data is restricted to personnel who need it, under confidentiality obligations;
We review our collection, storage, and processing practices on an ongoing basis.

No transmission over the Internet is one hundred percent secure, and we cannot guarantee absolute security. Tealfeed has appointed Mr. Rohit Garg as the Data Protection and Security Officer, reachable at rohit@tealfeed.com.

Data retention and deletion

We retain your data for as long as your account exists. When you delete your account, or ask us to, we delete your personal data, your business data, and your stored integration tokens, except where we are legally required to retain specific records (such as transaction records for tax and accounting). Some housekeeping is automatic: for example, tasks you archive inside the app are permanently deleted 30 days after archiving.

Your rights

You have the right to access a copy of your data, correct it, delete it, export it, restrict or object to how we use it, and withdraw consent at any time. To exercise any of these rights, email us at contact@tealfeed.com from your registered email address. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local supervisory authority.

Children’s privacy

Tealfeed is a business tool. Accounts may only be created by people who are at least eighteen (18) years old, and our Services are not directed to children. We do not knowingly collect personal information from anyone under thirteen (13). If you believe a child has provided us personal information, please contact us and we will delete it.

Transfer of business

If Tealfeed is involved in a merger, acquisition, reorganisation, or sale of assets, and user data would be transferred or become subject to a different privacy policy, we will notify our users beforehand. You will have the choice to delete your account before any such transfer takes effect.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the new Policy on this page and, for material changes, notify you by email or a prominent notice on the Site before the change becomes effective.

Contact us

For any queries, write to us at contact@tealfeed.com.