The short version: TravelSync reads the calendars you choose so it can add real drive times before your meetings and work out your mileage. That is the whole job. We do not sell your data, we do not show you ads, and nobody at TravelSync reads your meetings or your emails.
What TravelSync can see
TravelSync only ever looks at the things it needs to do its job — and only on the calendars you have told it to watch.
- Your name and email — so we know whose account it is. You sign in through Google or Microsoft, which means we never see or store your password.
- Events on the calendars you choose — the title, time, location and description. If you have not selected a calendar, TravelSync does not touch it.
- Your home and office addresses — typed in by you, used to work out where each journey starts and ends.
- Incoming emails while you are away (Out of Office only) — if you switch the auto-responder on, TravelSync checks who emailed you and when, sends a single reply, and moves on. It does not store the contents of your inbox.
What it does with it, and why
Every piece of information has one job — making your calendar honest about travel time.
- Spots your in-person meetings — it reads each event and works out which ones you actually have to travel to.
- Works out the drive time — it sends just the two addresses to Google Maps to get a real-world travel time. No names, no meeting details — only "from here, to there".
- Adds a travel block to your calendar — so the time you spend driving is actually blocked out, and nobody books over it.
- Builds your mileage report — it adds up the journeys and applies the official HMRC rates, ready for your records.
- Sends your out-of-office replies — if you have set them up, using your own mailbox so they look like a normal reply from you.
What we will never do
We never sell your data or hand it to data brokers.
We never use it for advertising or to build a profile of you.
We never use your information to train AI.
No human reads your calendar events or your emails. The only exceptions are the rare, lawful ones — investigating abuse, complying with the law, or where you have specifically asked us to look into something for you.
How we keep it safe
- You connect through official sign-in. Access is granted using Google's and Microsoft's own secure login (OAuth2) — the same system you would use to sign in to any trusted app.
- The connection keys are encrypted. The keys that let TravelSync talk to your calendar are scrambled before they are stored, so they are useless to anyone who should not have them.
- Everything travels over a secure connection. All data moves over an encrypted link — the padlock you see in your browser.
- We store the bare minimum. We keep the details needed to run the service, not full copies of your calendar or inbox.
Independently security-tested
TravelSync has passed an independent CASA Tier 2 security assessment — the Cloud Application Security Assessment programme run under Google's App Defense Alliance. An authorised third-party lab tested the whole application against the OWASP Application Security Verification Standard (ASVS) Level 2 — the recognised industry benchmark covering sign-in, session handling, access control, encryption and data protection — and TravelSync passed every category. The assessment is independently renewed every year, and Google has separately verified how TravelSync accesses your account data.
In plain English: an independent security lab checked how your data is protected and signed off that TravelSync meets the standard — and they do it again every year.
You are always in control
- Switch it off whenever you like. You can revoke TravelSync's access in seconds from your Google account or Microsoft account. That cuts the connection straight away.
- Delete everything in one click. Go to Settings and choose Delete Account. We wipe everything we hold about you, immediately. Any travel blocks already in your own calendar stay put — they are yours to keep or remove.
The services we rely on
A few trusted services help TravelSync work. Each one only ever receives the minimum it needs:
- Google Calendar / Microsoft Outlook — to read your events and add your travel blocks.
- Google Maps — to measure travel time. It only ever receives a start and end address, nothing else.
- Stripe — to take payment securely. We never see or store your card details.
Want the full legal detail? Our Privacy Policy spells everything out, including your formal rights.
Read the Privacy PolicyStill have a question? Email support@travelsync.co.uk