Privacy Policy

findaslot (“the service”, at findaslot.app) lets you view several Google calendars in one place, block time across them, and offer a public booking page. This policy explains what data the service accesses, why, and how it is handled.

Who we are

findaslot is operated by an independent developer and is the controller of the personal data described here. See the contact section at the end of this policy.

Information we collect

• Account information: when you sign in with Google, your name, email address and profile picture.
• Google Calendar data: only what you authorize, described in the next section.
• Booking data: the name, email address, answers and chosen time of people who book through your booking pages.
• Settings you create: connected account names, calendar roles, booking page settings and appearance preferences.
• Technical data: a session cookie that keeps you signed in, and standard server logs (such as IP address and request time) kept by our hosting provider for security and reliability.

Data we access from your Google account

When you connect a Google account, you grant these permissions (scopes):

• Your email address and basic sign-in identity, to identify the account you connected.
• The list of your calendars (names and colors), to let you choose which ones to use.
• Events in the calendars you choose (times, titles, status and whether you are marked busy or free), to display them in the merged calendar and to work out when you are available.
• Free/busy information, to offer only the times when you are free on your booking pages.
• Permission to create, update and delete events, used only to create the events you ask for and the “Busy” blocks described below.

How we use it

• To show your events from all connected accounts in one view, visible only to you.
• To create “Busy” blocks in your other connected calendars when something is scheduled in one of them. These blocks contain no title, description, attendees or location from the original event.
• To let people book time with you: we check your availability and create the calendar event, with the guest as an attendee, in the calendar you selected.

We do not use your calendar data for advertising, profiling, or to train machine-learning models.

Google API Services User Data Policy

findaslot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google is used only to provide and improve the user-facing features described above. It is not sold, not used for advertising, and not read by humans except with your explicit consent, for security purposes, or to comply with the law.

Data about people who book you

When someone uses a booking page, we store the name and email address they enter, their answers to any questions you configured, and the time they booked. This is used to create the event, send the invitation, and let them cancel or reschedule.

Where data is stored and how it is protected

• The service runs on Vercel, and data is stored in a managed PostgreSQL database (Neon). These providers process data on our behalf to run the service.
• Google refresh tokens are encrypted at rest (AES-256-GCM). Connections use HTTPS.
• Event titles are stored only so we can display them to you. They are never copied into another account's calendar.
• We do not sell your data or share it with third parties, other than the infrastructure providers above.

Retention and deletion

• Removing a connected account in Settings deletes its stored tokens, calendar list and cached events from our database. Events already created in Google Calendar (including “Busy” blocks) stay in Google and can be deleted there.
• You can revoke access at any time at myaccount.google.com/permissions.
• To have all your data deleted, including booking records, contact us using the details below.

Cookies and local storage

We use one essential session cookie to keep you signed in. Your theme, accent color and which calendars you hid are stored in your browser's local storage and never leave your device. We do not use advertising or analytics cookies.

Who we share data with

We do not sell personal data and we do not share it for advertising. Data is processed only by:

• Google, because the service reads from and writes to your Google Calendar at your request.
• Vercel (hosting) and Neon (database), which process data on our behalf to run the service.
• Authorities, where we are legally required to.

Your rights

You can access, correct, export or delete your data, and withdraw your consent at any time by removing a connected account or revoking access in your Google account. If you are in the European Economic Area or the UK, you also have the rights provided by the GDPR, including the right to object and to lodge a complaint with your data protection authority. Our legal bases are performing the service you request and, for Google Calendar data, your consent.

Children

The service is not intended for anyone under 16, and we do not knowingly collect their data.

Organization accounts

If you connect an account provided by your employer or a client, that organization's policies apply to its data. You are responsible for making sure connecting it is allowed.

Changes

We may update this policy. The date above shows the latest version.

Contact

Questions or deletion requests: privacy@pezzin.com.