Privacy Policy

1. Overview

Burnmeter is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data when you use the Burnmeter meeting cost analysis Service.

2. Data We Collect

We collect only the data necessary to provide the Service:

• Account information: Your name, email address, and profile picture from Google OAuth sign-in
• Employee data: Names, roles, and salary information you manually enter for your team members
• Meeting data: Meeting titles, dates, durations, and attendee lists you create or import
• Google Calendar data (optional): When you grant calendar access, we read timed event metadata (title, start/end time, attendee list, and conference information when available) to import meetings. We do not store your full calendar or event details beyond what is needed to create a meeting record.

3. How We Use Your Data

Your data is used exclusively to:

• Authenticate you and maintain your account
• Calculate meeting costs based on attendee salary data
• Display meeting history and analytics in your dashboard
• Power AI-assisted insights about your meeting patterns (using the Anthropic API, where data is processed but not stored by Anthropic beyond the request)

We do not sell, rent, or share your data with third parties for marketing purposes.

4. Google API Usage

Burnmeter uses Google OAuth 2.0 for sign-in and, optionally, the Google Calendar API (read-only) to import timed Calendar events and identify Google Meet conferences when available. Our use of Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: data obtained from Google APIs is used only to provide and improve the Burnmeter Service, is not transferred to third parties except as necessary to provide the Service, and is not used for advertising.

You can revoke Burnmeter's Google permissions at any time at myaccount.google.com/permissions.

5. Data Storage and Security

Your data is stored in a PostgreSQL database. We use JWT-based authentication with secure token expiry. We take reasonable technical measures to protect your data, but no system is completely secure and we cannot guarantee absolute security.

Google access tokens are used transiently to import calendar data and are not persisted in our database.

6. Data Retention

We retain your account and meeting data for as long as your account is active. You can delete individual meetings from the Meetings page.

Company owners can permanently delete their entire workspace at any time from Settings → Danger Zone. This immediately and irreversibly deletes the company along with all of its employees, meetings, roles, invites, and connected Google integration data; other team members are removed from the workspace but their individual user account is not deleted. This action cannot be undone, so we recommend exporting or noting down anything you need before proceeding.

To request deletion of your individual user account (name, email, and avatar from Google sign-in) after leaving or removing a workspace, contact us.

7. Your Rights

Depending on your location, you may have rights to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing

Company owners can self-serve most deletion requests via Settings → Danger Zone, as described above. For anything else — including deleting your individual user account — please reach out to us.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions or concerns about this Privacy Policy, please reach out to us.