Privacy Policy

Tandem is a product of Recoupa LLC (“Recoupa”, “we”, “us”). Tandem connects the Google accounts you work in, shows their calendars as one agenda, flags conflicts between them, and lets you share booking links, run meeting polls and copy events between your calendars.

Recoupa is responsible for the personal information described in this policy. You can reach us at hello@tandem.page or by mail at Recoupa LLC, 11693 San Vicente Blvd, Unit #1122, Los Angeles, CA 90049.

This policy applies to three groups of people:

• Users: people who sign in to Tandem and connect Google accounts.
• Invitees: people who book a meeting, vote in a poll or are added as a guest through a Tandem user's booking page or link. Section 10 explains how we handle their information.
• Website visitors: people who browse our public website or request beta access.

Account information

• The email address(es) you use to sign in.
• Profile settings you choose: display name, booking username, time zone (detected from your browser on first visit, and editable), and your progress through onboarding.
• For each connected Google account: its email address, the name, description, colour and logo you give it, its connection status and when it last synced.

Google user data

When you connect a Google account, you grant Tandem the openid, email and Google Calendar (https://www.googleapis.com/auth/calendar) permissions. With them we access:

• Your Google account's email address, to identify the account.
• An OAuth refresh token, stored encrypted (AES-256-GCM) so Tandem can keep your agenda up to date without asking you to sign in to Google each time. We also store the list of permissions you granted.
• Your calendar list: each calendar's ID, name, whether it is your primary calendar and your access level, plus whether you have chosen to include it in Tandem.
• Event metadata from the calendars you include: event ID, title, location, start and end time, whether it is all-day, whether it shows you as busy or free, a link to open it in Google Calendar, the invite's iCalendar ID (used to recognise the same meeting on several calendars), your own RSVP response, and whether the event is a copy Tandem made.
• Free/busy information for your calendars, checked just before a booking is confirmed so no one books a time that has just been taken.

Event metadata is cached only for a rolling window of about 7 days in the past and 60 days ahead. Every sync (about every 10 minutes) re-reads that window and deletes cached events that have been deleted in Google or have moved outside the window. Calendars you exclude are not synced and their cached events are deleted.

We do not store event descriptions, attendee lists or attachments. If you set up a cross-posting rule that copies descriptions, Tandem reads the description from Google at the moment it creates or updates the copy and writes it straight to your other calendar without saving it. We do not access Gmail or any Google service other than Calendar and your basic account email.

Scheduling data you create

Your availability schedules, booking pages (event types) and their settings and questions, one-off links and polls, cross-posting rules, automations and email templates. For copies Tandem makes, we keep a record linking each copy to its source event so we can update or remove it later.

Information invitees submit

• Bookings: the invitee's name and email, the email addresses of any guests they add, their answers to the host's questions (and a location, if the host asks for one), their time zone, the chosen time, and a reason if one is given when the meeting is cancelled.
• Poll votes: the voter's name, email and the times they selected.

Beta sign-ups

If you request beta access on our website, we store your name, email, the plan you're interested in, how many Google accounts you use, what you'd use Tandem for, any note you add, and the page you signed up from.

Cookies and local storage

We use only essential cookies: sign-in session cookies set by our authentication provider, and a short-lived cookie that protects the Google connection step against forgery. The app also keeps one small preference in your browser's local storage (whether you've collapsed the “Get started” panel). We use no advertising or analytics cookies, no tracking pixels and no third-party analytics.

Technical information

Like any website, our hosting provider processes standard request information (such as IP address, browser type and the pages requested) to deliver the site and protect it from abuse. Tandem also records sync and delivery errors so we can fix problems.

We use the information above only to provide and improve the features you use:

• Show your calendars as one agenda in your time zone and flag conflicts between accounts.
• Work out your availability across all your included calendars, show open times on your booking pages, and create bookings.
• Run one-off links and polls, including optional “hold” events on your calendar.
• Copy events between your calendars according to the cross-posting rules you set.
• Send the reminder and follow-up emails you configure in automations (once email is switched on).
• Sign you in, keep your account secure, prevent abuse and respond to support requests.
• Review beta requests and invite people to the beta.
• For work accounts (not personal Gmail), look up the public icon of the website at your email domain about once a month, to show a logo for that account.

We do not use your information for advertising, we do not sell it, and we do not build profiles of you for anyone else.

Tandem's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

• We use Google user data only to provide and improve the user-facing features of Tandem described in this policy, which you can see in the app.
• We do not transfer Google user data to others except as needed to provide those features (for example, to the infrastructure providers listed in section 8), to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you.
• We do not sell Google user data.
• We do not use or transfer Google user data for serving advertisements, including personalised or retargeted ads.
• We do not use Google user data to determine creditworthiness or for lending purposes.
• No human reads your Google user data unless you give us permission for specific data (for example, when you ask for support), it is necessary for security purposes such as investigating abuse, it is needed to comply with applicable law, or the data has been aggregated and anonymised for internal operations.
• We do not use Google user data to develop, improve or train generalised or non-personalised artificial intelligence or machine-learning models.

Tandem asks for Google's single calendar permission because some features need to write to your calendar. It only creates events in these cases, always on the primary calendar of the account involved:

• Bookings: when someone books you, Tandem creates the meeting on the booking page's account (with a Google Meet link if you chose one) and Google sends the calendar invitation to the invitee and guests. Reschedules and cancellations update or delete that event.
• Cross-post copies: copies of your events on your other accounts, as “Busy”, a placeholder title, or full details, depending on your rule. Copies are private by default, have no attendees, and send no notifications.
• Reserve holds: if you choose “reserve times” on a one-off link or poll, Tandem adds a “Hold” event for each offered time (no invitations are sent) and deletes them once a time is booked or the link is closed or deleted.

Every event Tandem creates is tagged in Google with a private marker. Tandem only updates or deletes events it created itself; it never edits or deletes anyone else's events. If the original of a copy disappears, Tandem re-reads the copy and checks for its marker before deleting it.

We don't sell or rent personal information, and we don't share it for cross-context behavioural advertising. We share it only:

• With service providers that run Tandem for us, under contracts that limit their use of the data to providing their service (table below).
• Between a host and their invitees, as the feature requires: a host sees the details their invitees submit; invitees see the host's name, the meeting details and available times (never the host's other events). In polls where the host turns on visible votes, voters can see other voters' names next to the times they picked (not their emails).
• For legal reasons: to comply with law or valid legal process, or to protect the rights, safety and security of our users, the public or Recoupa.
• In a business transfer, such as a merger or sale of assets, with notice to you and subject to this policy.

• Calendar events: only while they fall within the rolling window (about 7 days back and 60 days ahead). Older events are deleted at the next sync.
• Connected accounts: when you disconnect an account, Tandem asks Google to revoke its access and deletes the account's stored token, calendars, cached events, its booking pages, its one-off links and polls (with their votes), and the cross-posting rules involving it. Nothing in your Google Calendar is deleted by disconnecting.
• Bookings: kept while the host's Tandem account exists, so the host can see their meeting history, unless the host or the invitee asks us to delete them sooner. Poll votes: kept until the host deletes the poll (or disconnects the account it belongs to).
• Your Tandem account: kept until you ask us to delete it. Email hello@tandem.page and we will delete your profile and everything linked to it.
• Beta sign-ups: kept until the beta ends or you ask us to remove them.
• Backups: our database provider keeps backups on its own schedule; deleted data disappears from them as they rotate out.

• Google refresh tokens are encrypted with AES-256-GCM before they are stored, and decrypted only at the moment they are used.
• All traffic to Tandem and between Tandem and its providers uses TLS (HTTPS).
• Every database table has row-level security switched on with no public access; only Tandem's servers can read or write data, and every request is scoped to the signed-in user.
• Sign-in uses one-time email links, so there are no Tandem passwords to steal.

No system is perfectly secure. If we learn of a breach that affects your personal information, we will notify you as required by law. More detail is on our Security page.

When someone books a meeting or votes in a poll through a Tandem user's page, the Tandem user (the host) decides what to ask and why. The host is responsible for having a lawful basis to collect that information and for telling their invitees about it. For this data, Recoupa acts as a service provider (processor) to the host and processes it on the host's instructions to provide the service.

Invitees can ask the host to access, correct or delete their information, or contact us at hello@tandem.page and we will pass the request to the host or help directly. Invitees can cancel or reschedule using the link in their booking confirmation.

• Access, correction, deletion and export: you can see and edit most of your data in the app. To get a copy of your data or to delete your account, email hello@tandem.page. We respond promptly and within the time the law requires.
• Choose what Tandem sees: in Settings, under Calendars to sync, switch off any calendar you don't want Tandem to read.
• Revoke Google access: disconnect an account in Tandem, or remove Tandem at any time at myaccount.google.com/permissions.

EEA and UK residents (GDPR / UK GDPR)

We process your information to perform our contract with you (providing Tandem), for our legitimate interests (keeping the service secure, improving it, responding to beta requests), and to comply with legal obligations. You have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent where we rely on it. You can also complain to your local data protection authority.

California residents (CCPA / CPRA)

We collect the categories of information described in section 3 (identifiers such as name and email, calendar and scheduling information, and limited internet activity information) for the purposes in section 4. We do not sell or share personal information as those terms are defined in California law, and we do not use sensitive personal information to infer characteristics about you. You have the right to know, access, correct and delete your personal information, and we will not discriminate against you for exercising these rights. Email hello@tandem.page to make a request; we may need to verify your identity first.

Recoupa is based in the United States, and Tandem's database and servers are in the United States. If you use Tandem from elsewhere, your information is transferred to and processed in the United States, where data protection laws may differ from those in your country. Where required, we rely on appropriate safeguards such as our providers' standard contractual clauses.

Tandem is not intended for anyone under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has given us information, contact us and we will delete it.

We may update this policy as Tandem changes. We will update the “Last updated” date above and, for material changes, tell users by email or in the app before the change takes effect.

Recoupa LLC, a California limited liability company and operator of Tandem. Contact us by email at hello@tandem.page, or by mail at 11693 San Vicente Blvd, Unit #1122, Los Angeles, CA 90049, with any questions or requests about this policy or your information.