← Back to DateMate

Privacy Policy

Last updated: March 26, 2026

DateMate is operated from Ontario, Canada. We are committed to protecting your privacy in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian provincial privacy legislation.

1. Information We Collect

When you sign in with Google or Microsoft, we receive your name, email address, and profile picture from your OAuth provider. We also receive an access token and refresh token to interact with your calendar on your behalf. We do not collect passwords.

When you upload a document, its contents are processed in memory to extract dates and events. We store the extracted event data (titles, dates, times, locations) in our database so you can review and sync them.

2. How We Use Your Information

We use your information solely to provide the DateMate service:

  • Authenticate your identity via Google or Microsoft OAuth
  • Extract dates and events from your uploaded documents
  • Create calendar events on your behalf using your authorized calendar access
  • Track your upload usage for billing purposes
  • Send transactional communications related to your account

3. Document Processing

Uploaded documents (PDFs, HTML files) are processed server-side in memory. Document contents are sent to a third-party AI service (Anthropic's Claude API) for date and event extraction. We do not permanently store uploaded files on our servers. The extracted event data is stored in our database for your review.

Document contents sent to Anthropic's Claude API are subject to Anthropic's own data retention and privacy policies, which are outside DateMate's control. You can review Anthropic's privacy policy at anthropic.com/privacy.

4. Calendar Access

We request only the minimum OAuth scopes necessary to create calendar events:

  • Google: https://www.googleapis.com/auth/calendar — to create events on your Google Calendar
  • Microsoft: Calendars.ReadWrite — to create events on your Outlook Calendar

We only write events that you have explicitly reviewed and approved. We do not read, modify, or delete any existing calendar entries.

5. Third-Party Services

DateMate integrates with the following third-party services:

  • Google OAuth & Calendar API — authentication and calendar event creation
  • Microsoft Azure AD & Graph API — authentication and calendar event creation
  • Anthropic (Claude API) — AI-powered document parsing and event extraction
  • Stripe — payment processing for upload packs
  • Vercel — application hosting
  • Google AdSense — advertising displayed on the platform

Each third-party service is governed by its own privacy policy. We encourage you to review their policies.

6. Payment Information

All payment processing is handled by Stripe. DateMate does not store, process, or have access to your full credit card number or billing details. We store only a Stripe customer ID and pack activation status for account management.

7. Cookies & Analytics

We use essential cookies required for authentication and session management. We may use anonymized analytics (e.g., page views, upload counts) to improve the service. No personally identifiable information is shared with analytics providers.

8. Advertising

DateMate displays advertisements served by Google AdSense. AdSense may use cookies and similar tracking technologies to collect information about your browsing activity across websites in order to serve personalized ads. This tracking is operated by Google and is separate from DateMate's own data collection practices.

You can opt out of personalized advertising at any time by:

9. Cross-Border Data Transfers

DateMate uses third-party services that are based in the United States, including Anthropic, Stripe, Vercel, Google, and Microsoft. As a result, your personal information may be transferred to, stored in, and processed in the United States or other jurisdictions outside of Canada. By using DateMate, you consent to the transfer of your information to these jurisdictions, which may have different data protection laws than your province or country of residence.

10. Data Retention

Your account information and extracted event data are retained as long as your account is active. Uploaded document files are not retained after processing. If you delete your account, all associated data (profile, uploads, extracted events) will be permanently removed from our systems within 30 days.

11. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including encrypted connections (HTTPS), secure OAuth token storage, and access controls on our database. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Your Rights

Under PIPEDA and applicable provincial privacy laws, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Revoke calendar access at any time through your Google or Microsoft account settings
  • Opt out of personalized advertising through your browser or Google Ad settings
  • File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

To exercise any of these rights, contact our Privacy Contact at support@datemate.me. Our Privacy Contact is responsible for overseeing compliance with applicable privacy legislation and will respond to requests within 30 days.

13. Children's Privacy

DateMate is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. In certain Canadian provinces, a higher age of digital consent may apply (for example, 14 in Quebec under Law 25). Users in those provinces must meet the applicable local age requirement. If we learn that we have collected data from a user who does not meet the applicable age requirement, we will delete it promptly.

14. Applicable Law

This Privacy Policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Canada. DateMate is operated from Ontario, Canada, and subject to the jurisdiction of the courts of Ontario.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the email address associated with your account. Continued use of the service after changes constitutes acceptance of the updated policy.

16. Contact

If you have questions about this Privacy Policy, please contact our Privacy Contact at support@datemate.me. Our Privacy Contact is the designated individual responsible for DateMate's compliance with applicable privacy legislation.