Who this policy covers
This policy applies to people who administer a Book a Meeting Time account, people who connect a calendar or video account, and guests who use a booking link. In this policy, "the service" means BookAMeetingTime.com and its scheduling features.
Information we collect
- Account information. A host's name, email address, password hash, timezone, and account settings.
- Booking information. A guest's name, email address, optional note, selected meeting time, meeting title, and booking status.
- Calendar information. Connected account email addresses, calendar names and identifiers, free and busy time ranges, and events the service creates for confirmed meetings. The service uses busy time to calculate availability. It does not store the title or description of events read only for availability.
- Integration credentials. OAuth access and refresh tokens for Google and Zoom, or an Apple Account email and app-specific password for CalDAV. The service encrypts these credentials at rest.
- Technical information. Session identifiers, IP addresses, browser or device user-agent information, and timestamps used to operate and secure the service.
How we use information
We use personal information to:
- show available meeting times and prevent double bookings;
- create calendar events, send invitations, and add Zoom meeting links;
- authenticate hosts, maintain sessions, and send account emails;
- operate, troubleshoot, protect, and improve the service; and
- comply with law and enforce our Terms of Service.
We do not sell personal information or use calendar data for advertising.
Google user data
When a host connects Google Calendar, the service accesses the Google Account email address, calendar list, free and busy information, and the calendars where the host directs the service to create or update meeting events. We use this information only to provide the calendar and scheduling features the host selects.
Book a Meeting Time's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, sell it, or use it to train generalized artificial intelligence or machine learning models. People do not read Google user data unless the user gives specific permission, access is needed for security, or law requires it.
When we share information
We share information only as needed to run the service. This includes sending meeting details to the host, guest, and connected calendar or video provider. Infrastructure, database, email delivery, and hosting providers may process information for us under their service terms. We may also disclose information when law requires it, to protect rights or safety, or as part of a business transfer.
Google, Apple, and Zoom handle information under their own privacy policies when a user connects or uses those services.
Cookies and session storage
The service uses cookies that are necessary for account sessions, security, and OAuth connection flows. We do not use advertising cookies. Your browser can block cookies, but host login and connected account features may stop working.
Retention and deletion
We keep information while it is needed to provide the service, meet legal obligations, resolve disputes, and protect the service. A host can disconnect a Google, Apple, or Zoom account from the Integrations page. Disconnecting deletes the stored connection credentials and linked calendar list from Book a Meeting Time. It does not delete calendar events already created in an external service.
To request deletion of an account, booking information, or other personal information, email [email protected]. We may keep limited records where law, security, fraud prevention, or dispute resolution requires them.
Security and international processing
We use technical and organizational safeguards designed to protect personal information. No internet service can guarantee complete security. The service and its providers may process information in the United States and other countries where privacy laws may differ from those where you live.
Your choices and rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, or to object to or restrict some processing. You may also withdraw consent where consent is the basis for processing. Email us to make a request. We may need to verify your identity before responding.
Children
The service is not directed to children under 13, and we do not knowingly collect personal information from them. Contact us if you believe a child has provided personal information.
Changes and contact
We may update this policy as the service or legal requirements change. We will post the new effective date on this page. Questions or privacy requests can be sent to [email protected].