Security Overview
See an overview of our current practices and commitments.
DownloadYour calendar, your data
When you use ClockCycle, you trust us with your most valuable resources: your time and the data that comes with it. We take that responsibility seriously, which is why we put security and privacy first in everything we do.
Talk to us about securityOur guiding principles
Never selling data
We do not, and will never, sell your data
Protecting data
We apply advanced security measures to protect your data, including utilizing encryption protocols like AES 256 and TLS 1.2.
Staying compliant
We comply with all current data privacy laws, including GDPR, CCPA and CPRA.
Purpose-specific data collection
We collect data only when it serves an explicit purpose. We don't collect data for any purpose other than those stated on our privacy policy.
ClockCycle AI: security & privacy
Learn moreWant to learn more? Check out our documentation
SOC2 Report
Our SOC 2 Type II report is available for review. NDA required.
Request accessData Processing Addendum
Review our DPA and up-to-date list of data processors.
Review DPAWe set a high security bar for ourselves and our partners
We protect your data from the moment you create your account. We use Google's OAuth service to securely connect your ClockCycle account with your work email and use TLS and AES encryption to protect your data in transit and at rest.
We minimize our access to maximize your security
To move meetings on your behalf and free up time in your day, we ask for four key permissions. Here's what we need, and why:
Access
See, edit, share, and permanently delete all the calendars you can access using Google Calendar. This allows us to see your calendar and move events.
Users
View users on your domain. This helps us make sure that the meeting times we suggest work for your teammates, too.
Contacts
See and download your contacts. This lets us show your teammates' names and profile images in your events.
Resources
View calendar resources on your domain. This shows us conference room availability for your meetings.
Configurable processing for enterprise use cases
ClockCycle customers can choose to not share meeting descriptions with ClockCycle so that they are never stored in our database. This provides an additional layer of security for organizations with strict privacy and/or regulatory requirements.
Learn moreFind a bug?
We have dedicated teams working proactively to identify potential vulnerabilities and emerging threats. But building a safer web takes all of us. To encourage our community to contribute, we pay out Bug Bounty awards to people who are able to find vulnerabilities in ClockCycle.
If you believe you have identified a vulnerability, we'd love to hear about it!
Email Security team