Read-only by design
When you connect Google (and, soon, Microsoft), Gooseberry asks for read-only access to your calendar and contacts. It cannot create, change or delete events or contacts, and it never sends email, messages or invites on your behalf.
Private until you say otherwise
- Events found in your calendar sit in a review list only you can see. Nothing reaches your firm's shared workspace until you confirm it.
- Address books you upload are visible only to you until you choose who to add.
- Private notes are visible only to their author — not even workspace administrators can read them.
Encryption
- All traffic is encrypted in transit with HTTPS/TLS.
- Calendar access tokens are encrypted at rest with AES-256-GCM, stored in a table only our servers can read, and never sent to the browser.
- Database storage is encrypted at rest by our infrastructure provider.
Workspace isolation
Every firm's data is separated at the database level using row-level security, so one workspace can never read another's. We test these rules automatically against the live database — including that private notes, calendar review lists and stored tokens can't be read by anyone they don't belong to.
Sign-in
Gooseberry uses passwordless sign-in — Google or a one-time email link — so there are no Gooseberry passwords to steal or reuse.
You approve every draft
Meeting prep, structured notes and suggested matches are always drafts. Nothing is saved to a client's timeline until you approve it, and external facts are labelled with their source.
You stay in control
- Disconnect Google at any time — we revoke our access and delete the stored tokens.
- Export your data from Settings whenever you like.
- Delete your account, and your personal data with it, from Settings → Account.
Infrastructure
Gooseberry runs on established managed providers — Supabase for the database and authentication, and Netlify for hosting. See our Privacy Policy for the full list of providers.
Reporting a vulnerability
If you think you've found a security issue, please email support@usegooseberry.com with the details. We'll acknowledge it quickly, keep you updated, and won't take action against good-faith research.