Privacy policy

Effective November 2, 2026

AI Leads Wizard LLC ("we," "us," or "our") operates MightyBaseCRM and MightyBase Calendar, including mightybasecrm.com, app.mightybasecrm.com, and calendar.mightybasecrm.com (the "Services"). This policy explains how we handle information when you visit our website, use an invited account, connect a calendar, or make a booking.

Information we collect

We collect account information such as your name, email address, profile settings, and authentication information. Authorized users may enter contact details, prospects, customer records, conversation content, appointment information, and other business records. Bookings may include attendee names, email addresses, phone numbers, time zones, and answers supplied on a booking form.

Our hosting and service providers may process technical information such as IP addresses, browser information, timestamps, and operational logs to deliver and secure the Services.

Google Calendar access and use

Connecting Google is optional. With your authorization, MightyBase Calendar accesses your Google account identity, calendar lists, calendar event information, and availability. It uses this information to display connected calendars, detect scheduling conflicts, and create, update, or delete events associated with bookings. Google Meet information may be created when you select that meeting option. The permissions requested may allow broader calendar access than the particular calendars you select; we use that access for the scheduling features you enable.

We store connection credentials, including OAuth tokens, to maintain your authorized connection, along with calendar identifiers, availability information, and booking records needed to operate the Services. Calendar credentials are encrypted in application storage. We do not request your Google password.

We do not sell Google user data, use it for advertising, or use it to train generalized artificial intelligence or machine-learning models. Our use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including its Limited Use requirements. Human access to Google data is limited to your affirmative permission, necessary security investigations, applicable legal requirements, or other access permitted by that policy.

How we use information

We use information to provide accounts, contact management, conversations, bookings, connected calendars, and user-configured integrations; deliver account and service messages; troubleshoot problems; prevent misuse; and meet legal obligations. Customer communications and automations operate according to the applicable workspace's configuration.

Sharing and connected services

Information is shared with authorized workspace or team users as needed for enabled features, and with booking participants as needed for their appointments. Providers supporting hosting, databases, authentication, and email delivery process information needed to provide those services. Our current infrastructure includes Hostinger for the public website, Railway for application hosting and databases, Resend for account email delivery, and Google for authorized calendar connections.

If you enable a webhook or another integration, the information included in that integration is sent to its configured destination. Connect only destinations you trust and have authority to use. We may disclose information when legally required or necessary to protect rights and security. Transfers of Google data remain subject to Google's Limited Use requirements. We do not sell personal information or share it for cross-context behavioral advertising.

Cookies

The applications use essential cookies and similar storage for sign-in, sessions, preferences, and security. This public website does not include advertising trackers or analytics scripts.

Retention and deletion

We retain information as needed to provide the Services, maintain authorized business records, address security issues, and meet legal obligations. Disconnecting Google stops future access through that connection; it does not automatically delete existing bookings or business records. You can also revoke access through your Google Account connections.

To request access, correction, deletion, or account closure, contact us below. Where available, you may manage or delete records through the application. Some records may be retained for legal or security reasons, and backup copies may remain until they expire through normal backup processes.

Your information and choices

Depending on your location, you may have rights to access, correct, delete, or obtain a copy of your personal information, or to withdraw consent. Contact us to exercise applicable rights. If a business using MightyBaseCRM collected your information, contact that business first; we can help direct your request. Authorized users are responsible for having permission to upload and use other people's information.

Security and international processing

We use reasonable safeguards appropriate to the Services, including HTTPS and access controls. No system is completely secure. Information may be processed in the United States and other locations where our providers operate.

Children

The Services are intended for adult business users and are not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes and contact

We may update this policy and will revise its effective date. Material changes will be communicated where required, and new uses of Google data will require any additional consent required by Google policy.

For privacy questions or requests, contact AI Leads Wizard LLC at marc@aileadswizard.com.