Privacy Policy

This policy covers personal data collected through ExcuseBee at app.excusebee.com, operated by Marge AI in Singapore. It applies to account holders, their teammates, and anyone whose data reaches us because a customer connects a social media account or uploads brand assets to the product.

We collect the following categories of data:

• Account data: your name, work or personal email address, and workspace details when you sign up or are invited to a workspace.
• Brand and brief inputs: your website URL, brand colors, logos, product photos, and any text or preferences you provide to help us generate content on brand.
• Connected account data: access tokens and basic profile details (such as your account handle and platform) for the social media accounts you connect through our publishing partner, bundle.social, so we can publish and schedule on your behalf.
• Connected Google account data: if you connect a Google account, we store an encrypted OAuth token and your Google email so ExcuseBee can, at your request, read and manage events on Google Calendars you own, read the specific Google Drive files you choose, and read and write the Sheets among them. See section 5 for the full detail.
• Generated content: the carousels, captions, and images you create, regenerate, approve, or publish inside ExcuseBee.
• Usage data: how you use the product, such as pages visited, features used, and generation activity, which helps us fix bugs and improve the product.
• Payment metadata: we do not store your full card details. Subscription payments are handled by our payment processor, Airwallex, who holds your card details and billing information. We keep limited metadata such as your plan, subscription status, and billing period so the app knows what you are entitled to.

We use your data to:

• Provide the service, including generating on brand content, publishing and scheduling to your connected accounts, and showing you performance analytics.
• Run your subscription, including billing, renewals, and customer support.
• Keep the product secure, prevent abuse, and enforce our Terms of Service.
• Communicate with you about your account, billing, and important product updates.
• Improve ExcuseBee, for example understanding which features are used and where people get stuck.

We do not sell your personal data, and we do not use your brand content or connected account data to train AI models on behalf of other customers.

ExcuseBee is built on top of a small number of specialist providers. Each only receives the data it needs to do its job:

• Anthropic (Claude) processes brand inputs and brief details to generate captions, ideas, and brand profiles (AI text generation).
• Fal processes brand and design inputs to generate carousel and post images (AI image generation).
• bundle.social stores your connected social media account tokens, publishes and schedules your posts, and provides post analytics and unified inbox messaging.Social media capabilities provided by bundle.social.
• Airwallex processes subscription payments and holds your payment and billing details on our behalf (payment processing).
• Resend sends transactional email on our behalf, such as sign in links and account notifications (email delivery).
• Supabase hosts our application database, where your account, brand, and generated content records are stored (data hosting).

These providers act as our data processors and are only permitted to use your data to provide the service to us, not for their own independent purposes.

When you connect a Google account, ExcuseBee requests only the narrow Google scopes it needs to do what you ask:

• Google Calendar events on calendars you own (calendar.events.owned): so the assistant can read your events to answer questions about your schedule and create, change, or delete events when you ask it to. We do not access calendars that are owned by other people and shared with you.
• Specific Google Drive files you choose (drive.file): access is limited to the individual files and folders you explicitly pick with Google's file picker (or that ExcuseBee creates for you), such as Google Docs, Slides, Sheets, and plain-text files. We can read those files, and read and write the Sheets among them. We cannot see any other file in your Google Drive.

Your Google OAuth tokens are encrypted at rest (AES-256-GCM) and used only to make Google API calls on your behalf while you use the product. When you disconnect your Google account, we delete your stored Google OAuth tokens immediately, and we do not keep copies of your calendar events or Drive file contents. You can disconnect at any time inside ExcuseBee, or revoke access from your Google Account permissions.

Who we share Google user data with. We do not sell Google user data, and we do not share it with any third party for their own purposes. We disclose it only to the following service providers, and only to deliver the feature you asked for:

• Anthropic (the Claude AI model that powers the assistant). When you ask the assistant to work with your calendar or a shared Sheet, the relevant event details (such as titles, times, and attendees) or the content of the file you shared are sent to Anthropic so it can understand and answer your request. Anthropic processes this data on our behalf and does not use it to train its models.
• Supabase (our database host) stores your encrypted Google OAuth tokens, your connected Google email address, the names of the Drive files you have chosen to share, and your chat history with the assistant, which may include calendar or file details the assistant quoted back to you in conversation.
• Google itself receives the changes you ask us to make (for example, when you have us create or update an event, Google sends the invite to any attendees you include).

We do not disclose Google user data to any advertising network, data broker, or analytics provider. Beyond the providers above, we may disclose it only if the law requires it, or as part of a merger or acquisition (in which case we will require the successor to honor this policy).

Limited Use. ExcuseBee's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Our use of raw or derived user data received from Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements. In particular, we do not use Google Calendar or Google Sheets data to serve or personalize advertising, and we do not use it to train, retrain, or improve any generalized or standalone AI or machine learning model. The Google user data sent to Anthropic (Claude) is used only to generate the specific response you requested, and no human reads your Google user data except with your explicit consent, for security or abuse investigations, to comply with the law, or where the data has been aggregated and anonymized.

We keep account and generated content data for as long as your account is active, so you can keep using and referring back to your work. If you cancel your subscription, your data remains accessible on the free trial tier limits until you ask us to delete your account, at which point we delete or anonymize your personal data within a reasonable period, except where we are required to keep certain records (such as billing records) for legal or accounting purposes.

Under the PDPA and general good practice, you can ask us to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Delete your personal data or your account, subject to legal or accounting retention requirements.
• Withdraw consent for us to use your data for a particular purpose, understanding this may limit what ExcuseBee can do for you.

To exercise any of these rights, email hello@excusebee.com. We will respond within a reasonable time and may need to verify your identity first.

We use reasonable technical and organizational measures to protect your data, including encrypted connections, access controls on our database, and relying on providers (Supabase, Airwallex, bundle.social) that maintain their own security programs. No system is completely secure, so we cannot guarantee absolute security, but we take reasonable steps to protect your information and will notify affected users if we become aware of a data breach that is likely to result in significant harm, as required by the PDPA.

Some of our service providers (including Anthropic, Fal, bundle.social, and Airwallex) operate infrastructure outside Singapore. Where your data is transferred outside Singapore, we take reasonable steps to make sure it receives a standard of protection comparable to the PDPA, including relying on providers with their own data protection commitments and, where applicable, standard contractual clauses.

For any privacy question, request, or concern, contact our data protection point of contact