Privacy

When you book a time, you provide your name, your email address, and optionally a note about what you would like to cover. The service also records the time you chose and the time zone your browser reported, so the meeting can be shown correctly to both of us.

Nothing else is asked for. There is no account to create, no password, and no payment details.

To hold the appointment, to put it in both calendars, and to send you a confirmation with the details. That is the whole purpose. Where the GDPR applies, the lawful basis is performance of a contract at your request.

The booking pages set no analytics cookies and load no third-party trackers. The only cookie the service sets belongs to the dashboard sign-in, and it is never set for someone who is simply booking a meeting.

Booking details are shared only with the services needed to deliver the meeting:

• Supabase — Database and account sign-in.
  Receives: Bookings, schedules, and the dashboard account
• Google — Calendar events and Meet links.
  Receives: Meeting title, time, and the attendee's name and email address
• Resend — Sending confirmation email.
  Receives: The attendee's name and email address, and the meeting details
• Vercel — Hosting.
  Receives: Standard server request logs

Your details are not sold, rented, or used for marketing, and are not shared with anyone else unless the law requires it.

When a Google Calendar is connected, this service can create and change events on the calendar of the person being booked. It requests only the permission needed to do that. It does not read the contents of any other calendar, and it has no access whatsoever to the calendar of the person making the booking — you are sent an invitation, exactly as a person emailing you one would.

A booking is kept while it is useful as a record of a meeting that happened, and is deleted on request. Cancelling a meeting keeps the record but marks it cancelled; deleting it removes it.

You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Write to info@snyamson.com and say which. No particular form of words is needed.

If you are in the UK or EU you also have the right to complain to your data protection authority.

Traffic is encrypted in transit. Access tokens for connected calendars are encrypted before they are stored, and are never returned by any part of the service that a browser can reach.

No service can promise perfect security, and this one does not.

This service is not intended for children under 13, and it is not knowingly used to collect their information.

If this policy changes in a way that matters, the date at the top changes with it.

Solomon Nyamson — info@snyamson.com