Privacy Policy

Last updated December 31, 2025

1. Introduction

At Let's Assist, we value your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. We are committed to protecting your personal information and being transparent about our data practices.

2. Information We Collect

We collect the following information:

  • Personal Information: Email address, name, and phone number (if you choose to provide it) when you create an account or sign up for events.
  • Event Data: Your participation in volunteering opportunities, including sign-ups, check-in/check-out times, and event attendance.
  • Analytics Data: We use PostHog to collect anonymized data about how you interact with our platform (page views, clicks, etc.) to improve our services. You can opt out of analytics in your account settings.
  • Google Calendar Data (Optional): If you choose to connect your Google Calendar, we access and store encrypted tokens to add volunteering events to your calendar. We do not store your calendar contents.

3. How We Use Your Data

We use the collected data to:

  • Create and manage your account.
  • Process your signups for volunteering opportunities.
  • Manage event check-ins/check-outs and send certificates when applicable.
  • Add events to your Google Calendar if you've connected it.
  • Improve our platform through anonymized analytics (PostHog).
  • Send you important service notifications and updates.

4. Google Integrations (Optional)

If you choose to connect your Google account for Calendar or Sheets integrations:

  • What We Access: We request the following Google permissions to enable features like calendar sync and spreadsheet management:
    • Email and Profile (userinfo.email, userinfo.profile): To identify and link your Google account to your Let's Assist profile.
    • Google Drive Files (drive.file): To access only the specific Google Drive files you select or create through our app, such as spreadsheets.
    • Google Sheets (https://www.googleapis.com/auth/spreadsheets): To create, read, update, and delete spreadsheets and sheets for features like templates, bulk import/export, and two-way sync. Full access is required because our features involve structural changes, formulas, and bulk operations that narrower scopes do not support.
    • Google Calendar (https://www.googleapis.com/auth/calendar): To create, update, share, and remove calendars and events for scheduling features and sync.
  • How We Use It: We use these permissions to add volunteering events to your calendar, manage spreadsheets for data import/export, and enable two-way synchronization. We store encrypted OAuth tokens securely and do not access other Google data.
  • Data Retention: OAuth tokens are retained only as long as you maintain the connection. Upon disconnection or account deletion, we delete tokens and associated data within 30 days.
  • No Sharing: We do not share your Google data with third parties. It is used only within Let's Assist.
  • How to Disconnect: You can revoke access at any time via your Google Account (Security → Third-party apps with account access) or in your Let's Assist account settings. This deletes our stored tokens. Events or spreadsheets already created will remain in your Google account unless you delete them manually.

Our use of Google APIs complies with the Google API Services User Data Policy.

5. Third-Party Services

We use the following services:

  • Supabase: Secure database hosting and management.
  • PostHog: Optional analytics to improve our platform. You can opt out in your settings.

These services have their own privacy policies. We do not share your personal data with these services beyond what is necessary for them to operate (e.g., Supabase stores your data, PostHog only receives anonymized usage information).

6. Data Security

We implement strict security measures to protect your personal data from unauthorized access, loss, or misuse. However, no system is completely secure, and we cannot guarantee absolute protection. We encourage users to take precautions, such as using strong passwords and being mindful of data sharing.

7. Your Rights

You have the right to:

  • Access the personal data we have about you.
  • Request corrections or deletions of inaccurate information.
  • Opt out of PostHog analytics in your account settings.
  • Delete your account and all associated data at any time. You can do this in your account settings or by contacting legal@lets-assist.com.

8. Data Retention

We keep your personal data as long as your account is active. If you delete your account, we will remove your data within a reasonable timeframe, except where we are legally required to retain it.

9. Changes to this Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Significant changes will be communicated via email or website notifications. We recommend reviewing this policy periodically.

10. Contact Us

For privacy-related inquiries, email us at legal@lets-assist.com.