Privacy Policy
How Shakehand handles your data and protects your privacy.
1. Introduction
At Shakehand ("we", "us", or "our"), we are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy describes how we collect, use, store, and process your personal information when you use our website, application, services, and Google Integrations.
2. Information We Collect
To provide our outreach sequencing, CRM, and calendar scheduling services, we collect several types of data, including:
- Account Information: Name, email address, password, and billing details when you register for an account.
- Connected Mailboxes & Calendars: IMAP/SMTP credentials, Google OAuth tokens, server hosts, ports, and connected calendar identifiers.
- Sales & Campaign Data: Prospect lists, contact emails, sending schedules, template content, reply records, and scheduled meeting times.
3. Google API Services & Google Calendar User Data
Shakehand provides an integrated calendar and scheduling service that allows users to link their Google Calendar. When you connect your Google account via Google OAuth, we request access to the following Google API scopes:
Purpose: Used to read and display your upcoming Google Calendar events inside the Shakehand Calendar interface, check your availability, and prevent scheduling conflicts when prospects book calls with you.
Purpose: Used to create, edit, reschedule, and delete meeting events on your Google Calendar when sales calls and discovery meetings are scheduled or updated with prospects through Shakehand.
Purpose: Used to authenticate your identity, identify the connected Google account, and display your email address in the Shakehand connected calendar settings.
Google API Limited Use & User Data Policy Compliance:
Shakehand's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
🔒 Prohibition on AI/ML Model Training: Shakehand does NOT use Google Workspace APIs or any Google user data (including Google Calendar data, meeting details, or user profile information) to develop, train, or fine-tune generalized artificial intelligence (AI) and/or machine learning (ML) models.
We do not transfer, sell, or disclose Google user data to third-party advertising platforms, data brokers, or information resellers.
4. Google User Data Retention & Deletion
We believe you should have complete control over your Google user data. We implement strict data retention and deletion policies:
Data Retention Period:
Google user data (including OAuth tokens and calendar event metadata) is retained only for as long as your Google account remains actively connected to Shakehand. We only store the minimal metadata required to display your current schedule and manage prospect bookings.
How to Delete Your Google User Data:
You can delete or disconnect your Google data at any time through the following methods:
- In-App Disconnect: Go to the Calendar or Settings page inside Shakehand and click "Disconnect Google Calendar". This action immediately and permanently deletes your Google OAuth access token, refresh token, and cached calendar event metadata from our database.
- Google Account Revocation: You can revoke Shakehand's access directly at any time via your Google Account Security settings at Google Third-Party Permissions (https://myaccount.google.com/permissions). Once revoked, Shakehand can no longer access your Google data.
- Account Deletion Request: You can request permanent deletion of your Shakehand account and all associated data by emailing support@shakehand.cloud. All user records, tokens, and data are permanently erased within 48 hours.
5. Data Sharing and Subprocessors
We do not sell, rent, or trade your personal information or connected Google data to third parties. We only share information with trusted infrastructure subprocessors (such as encrypted cloud database hosting providers) solely to the extent necessary to deliver the service, under strict confidentiality and data protection agreements.
6. Security Measures
We use industry-standard encryption protocols (including HTTPS / TLS 1.3 in transit and AES-256 at rest) to safeguard your personal information and Google OAuth tokens. Access to production databases is restricted to authorized personnel under least-privilege principles.
7. Contact Us & Data Protection Officer
If you have any questions, concerns, or deletion requests regarding this Privacy Policy or our Google API integrations, please contact our privacy team at: