Is my data safe? Who can see it?
Short answer: your jobs, customers and prices stay with you. There is no account, no database and nothing kept on a server. Nobody at MJM can see your calendar or your invoices.
The four things to know
- ✓ Nothing is saved on a server. Each job goes out, comes back as invoice lines, and is forgotten. There is nowhere for it to be kept.
- ✓ MJM can't see your data. Matt runs the website, but there is nothing in it to look at. The server only records sizes and "it worked / it didn't", never what the job said.
- ✓ Your Google sign-in stays on your phone or laptop. It is never sent to MJM. You can switch it off at any time (see below).
- ✓ Nothing is ever sent to your customers. You get a file. You check it and load it into Xero yourself.
Where your stuff lives
| What | Where | Who can see it |
|---|---|---|
| Your calendar jobs | Your Google Calendar, shown in your browser | You |
| A job while it's being read into invoice lines | Passes through MJM's server for a few seconds to an AI (Anthropic's Claude), then comes back | Anthropic processes it under business terms. Nobody at MJM. |
| Your hourly rate, price book, customer list | Your own browser, and the settings file you can save | You |
| The invoice files | Your downloads folder | You |
| Your invoices in Xero | Your Xero, after you load the file in | You and whoever you've given Xero access to |
What Google asks you to allow
Two permissions: see the list of your calendars (so you can pick the jobs one) and see and edit events on your calendars. The tool uses them to read your jobs and to colour a job green when you mark it done. That's it. It never adds, moves, renames or deletes anything in your calendar, and it can't touch Gmail, Drive or your contacts.
The first time you sign in, Google shows a warning that the app isn't verified. That's because it's a private tool for a couple of tradies, not a public app. It's normal.
What the tool never does
- ✗ Never emails, texts or invoices anyone
- ✗ Never connects to your Xero — you load the file yourself
- ✗ Never keeps your jobs, customers or prices on a server
- ✗ Never asks for your Xero login, bank details or ABN
- ✗ Never tracks you — no cookies, no analytics
Things worth doing on your side
- Turn on 2-Step Verification on your Google account. Your Google sign-in is the real key to all this.
- Keep your phone or laptop locked. Your price book lives in the browser, so anyone with your device can open the tool's settings (not your calendar — that still needs your Google sign-in).
- Untick any job you'd rather not send to the AI. Customer names and job notes in a ticked job are read by Anthropic's Claude to turn them into lines. They're not used to train it, but they do leave Australia for a few seconds.
- Treat the downloaded files like any invoice file. They have customer names and amounts in them.
Want out? Three steps
- Go to myaccount.google.com/permissions, find Calendar Invoicer and tap Remove access.
- In your browser, clear this site's data (Chrome: tap the padlock next to the address → Site settings → Delete data). That wipes your price book and settings.
- Delete any invoice files you don't need from your downloads.
After that there's no trace of you anywhere — nothing on MJM's side to delete, because nothing was ever there.
Don't just take our word for it
The code is open to you or anyone you ask to look at it (an accountant, a mate who does IT). Ask Matt for access to the repository. The longer, technical version of this page, with exactly where to look for each claim, is in the repository as docs/privacy-and-security.md.