Privacy Policy

Information we collect

• Host account data: a signed host user ID and workspace ID from the design platform when you use the app; optional account email you enter and verify (for sign-in and booking alerts); calendars, hours, themes, and settings you create.
• Google Calendar connection (optional): if you choose Connect Google Calendar, we store your Google account email, OAuth access and refresh tokens, selected calendar ID, and scopes granted. We use those credentials only to create or delete calendar events for bookings and to read free/busy times for availability. We do not store your full calendar event list.
• Guest booking data: name, email, party size, answers to host-defined questions, and appointment times when a guest books or RSVPs.
• Technical data: standard server logs (IP, user-agent, timestamps) for security and reliability.

How we use information

• Operate booking pages and host management tools
• Send confirmation, host-alert, and account verification emails
• Sync appointment create/cancel to your linked Google Calendar and exclude Google busy times from availability (when connected)
• Prevent abuse, debug outages, and improve reliability
• Delete host data when we receive an uninstall or account-removal notice for the app

Google user data and Limited Use

Calendful's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Google Calendar data is used only to provide calendar sync and availability features you enable in Calendful.
• We do not sell Google user data, use it for advertising, or transfer it to data brokers.
• We do not use Google user data to train generalized AI or ML models.
• Humans do not read Google user data except with your consent, for security or compliance investigations, or where required by law.

You can disconnect Google Calendar in Calendful Account settings (when available) or revoke access at Google Account permissions. Revoking or disconnecting deletes our stored Google tokens for your account. Uninstalling the app also deletes your Calendful account data, including Google connection records.

Sharing

We use infrastructure and email providers (for example hosting and transactional email) to run the service. When you connect Google Calendar, we call Google APIs with your tokens to write events and read free/busy data. We do not sell personal data. Hosts see guest details for their own calendars. Hosts sign in through the design platform that embeds Calendful; we do not receive that platform's password.

Retention

Host and guest records remain while the host’s calendars exist. Google OAuth tokens are kept only while the Google connection is active. When a host uninstalls the app, we delete their account and related calendars, bookings, and Google connection data. You can also ask us to delete data using the contact below.

Contact

Privacy questions: hello@zygaapps.com