Privacy policy

In short: we keep nothing. Not your documents, not the events or contacts found, not your Google access.

Last updated: 8 October 2026. In case of discrepancy, the French version prevails.

Controller

OLIV-IT (EURL, RCS Clermont-Ferrand 911 635 498), 7 rue de Metz, 63000 Clermont-Ferrand, France, publisher of ai-tools.oliv-it.fr (see the legal notice). Contact: [email protected].

The tools

• Import events: extracts the events of a poster, a PDF or some text; you then save them to Google Calendar, to an .ics file (Outlook, Apple Calendar…), through links to your online calendar or with QR codes.
• Import contacts: extracts the people and their contact details from a business card, a signature or a list; you then save them to Google Contacts, to a vCard or CSV file, or with QR codes.

The analysis needs no account and no sign-in. Files (.ics, .vcf, .csv) and QR codes are created in your browser: they never go through our server.

Your documents

The images, PDFs or text you provide are sent to our server, then to the Claude API by Anthropic to extract the events or contacts. Our server does not write them anywhere: they are forgotten as soon as the response is sent. Anthropic does not use data received through its API to train its models. Before sending, photos are resized in your browser, which strips their metadata (including GPS location); for Word, Excel or PowerPoint documents, only the extracted text is sent.

Along with the document, the tool only sends today's date, your browser's time zone (events) or your browser's country, to read phone numbers written without a country code (contacts).

Third-party contact details

The documents analysed by the “Import contacts” tool contain other people's contact details. They are used only to show you the contacts to save, are not kept and are used for no other purpose. You save them in your own address book, for which you are responsible.

Bot check

To keep the free analyses for real people, each analysis is preceded by an automatic check by Cloudflare Turnstile (Cloudflare, Inc.). It relies on technical signals from the browser (IP address, browser and device characteristics), with no advertising cookie and no cross-site tracking; Cloudflare does not use this data for advertising. Most of the time it is invisible; sometimes a checkbox is shown.

Technical logs

To monitor costs and detect abuse, the server only logs volumes: type and size of files, number of items found, processing time. No content, no event title, no name, no email address. Your IP address is kept in memory for at most 24 hours to limit the number of analyses per person. The hosting provider also keeps standard access logs (IP address, requested page, never the content sent) for 30 days.

Hosting

The site is hosted by Google Cloud Run in the europe-west1 region (Belgium). No database, no cookies, no audience measurement. Google's sign-in libraries are only loaded if you choose to save to Google.

Google user data

Signing in with Google is optional: it is only requested when you choose to save directly to Google Calendar or Google Contacts. Each tool requests only its own permission.

What Google user data we access

• A temporary OAuth access token, issued by Google when you sign in.
• Import events: the list of calendars you own (calendar.calendarlist.readonly scope): calendar ID, name and primary flag; and the events the app creates at your request (calendar.events.owned scope). Google offers no “create only” scope: the app only creates events, in the calendar you chose.
• Import contacts: the contacts the app creates at your request (contacts scope). Here too, Google offers no “create only” scope: the app only creates the contacts you approved.

The app never reads your existing events or contacts, nor your email address or profile, and never modifies or deletes them. It does not create any aggregated or anonymized data from Google user data.

How we use Google user data

• The calendar list is used only to display the menu where you choose the destination calendar.
• The events and contacts scopes are used only to create the events or contacts you have reviewed and selected.
• All Google API calls are made directly from your browser. The access token is never sent to our server, and no Google user data reaches our server.

Google user data are not used for any other purpose: no advertising, no profiling, no sale, and no use to develop, improve or train generalized or non-personalized AI/ML models. No Oliv-IT staff reads them.

How we share, transfer or disclose Google user data

We do not sell, rent or transfer Google user data to anyone. None is sent to Anthropic (the AI analysis of the document happens before signing in to Google) or to Cloudflare. The access token is only sent to Google's revocation endpoint when you sign out. Google user data are not disclosed to any third party, except where required by law.

How we protect Google user data

• All traffic is encrypted with HTTPS (TLS), with HSTS and a Content Security Policy that only allows the required Google and Cloudflare domains.
• The access token lives only in the memory of the browser tab: never in cookies, local storage, a database, a file or a log.
• The app requests the narrowest scopes Google offers for this use, and access is time-limited (1 hour maximum).
• The server stores no data at all: no database, no file storage. API keys are kept in Google Secret Manager, and administrative access is restricted to the Oliv-IT account.

Retention and deletion of Google user data

• Access token: expires after 1 hour at most, and is revoked as soon as you click “Finish” or “Sign out”, close the page, or after 15 minutes of inactivity.
• Calendar list: kept in the browser tab's memory during the session only, then discarded.
• Created events and contacts: they live in your Google account and belong to you; you can edit or delete them at any time in Google Calendar or Google Contacts. Oliv-IT keeps no copy.

Because we retain no Google user data, nothing remains on our side after a session. You can revoke the app's access at any time at myaccount.google.com/connections (after signing out, “Outils IA Oliv-IT” no longer appears there), and contact [email protected] for any question or data request (access, deletion, objection under the GDPR; you may also lodge a complaint with the CNIL).

Limited Use

Oliv-IT's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.