Who we are
Clearway is operated by [Legal entity name], reachable at hello@bookclearway.com. We are the data controller for the information described here.
What we collect
- Your account. When you sign in with Google we receive your name, email address, profile image and Google account identifier. Signing in asks for nothing else.
- Your calendar, read-only, only if you connect it. Connecting is a separate step with its own consent screen. We then read events on your primary calendar from seven days ago to twelve months ahead: title, description, location, start and end times, time zone, attendees (name, email, response), organizer and any video-call link. We refresh this about every fifteen minutes. We never write to your calendar unless you turn write-back on yourself, and that feature is off by default.
- What we work out from it. Where each in-person meeting probably is, with the evidence we used; which meetings look like a trip; the trips, flights, hotels and ground options you review and pick.
- Your preferences. Airlines, hotel chains, seat and cabin, home airport, buffers, and, if you enter it, your home address (geocoded so we can time the drive to the airport).
- An activity log. Sensitive actions (connecting or disconnecting a calendar, exporting or deleting your data) are recorded with identifiers only, never the content.
- Technical data. Our hosting provider records the usual request logs (IP address, browser, time). We use your IP address for short-lived rate limiting on sign-in and calendar connection.
We do not run analytics, advertising pixels, session recorders or third-party trackers. The only cookies are your session (fourteen days) and your light/dark theme choice.
What we use it for
- Working out where your meetings are and which of them make a trip.
- Searching flights, hotels and ground transport for that trip and ranking them by your preferences.
- Timing your travel day against the meetings on it.
- Keeping the service running: sign-in, security, rate limiting, debugging faults.
We do not sell your data, use it for advertising, or use it to train machine-learning models. Access to your calendar is used only to provide the features you can see in the product.
Google user data
Clearway's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The calendar tokens Google issues us are encrypted at rest with a key that is kept outside the database. You can revoke our access at any time from your Google account permissions; we then stop syncing and you can delete what was already imported (below).
How long we keep it
- Calendar events are deleted thirty days after they end, unless you confirmed a location on them (we keep those to recognise the same venue next time).
- Everything else stays while your account exists.
- Deleting your account removes all of it immediately: sessions, calendar connections and events, deduced locations, trips, preferences and the activity log. There is no recovery window.
- Encrypted database backups are kept for up to ninety days and are then destroyed.
How we protect it
- Everything travels over TLS. The site sends a strict content-security policy and the full set of browser security headers.
- Calendar tokens are envelope-encrypted with a key held outside the database. No secret is stored in plain text.
- Loyalty numbers and corporate codes (the vault, coming) are encrypted in your browser with a key we never hold. What reaches our servers is ciphertext.
- Every query is scoped to your account at the database layer, and a test fails if a new table skips that rule.
Your choices and rights
- Export everything we hold about you as one JSON file from the Your data page.
- Delete your account from the same page, effective immediately.
- Disconnect a calendar at any time from the Calendar page, or revoke access at Google.
- Correct any location we deduced wrongly, on the event itself.
If you are in the UK, EU or another jurisdiction with data-protection rights (access, correction, deletion, portability, objection), the tools above cover them; anything they don't, email us. You also have the right to complain to your local supervisory authority.
Children
Clearway is a tool for working adults and is not directed at anyone under 16. We do not knowingly collect their data.
Changes
When this policy changes, the date at the top changes with it and material changes are announced in the app before they take effect.
Contact
Questions about any of this: hello@bookclearway.com.