Privacy Policy

Last updated: 29 November 2025

SlotSync ("we", "our", or "us") provides a calendar synchronization and scheduling platform that helps users connect and manage their calendars across multiple providers. This Privacy Policy explains how we collect, use, and protect your data when you use our services.

By using SlotSync, you agree to this Privacy Policy.

1. Information We Collect

1.1 Data You Provide

  • Account information (name, email address)
  • Calendar provider (Google, Microsoft)
  • Connection tokens (OAuth)

We do not store your calendar password.

1.2 Data We Access From Calendar Providers

With your explicit permission, we may access:

Google (via OAuth scopes):

  • Basic profile information (name, email)
  • Calendar metadata and events
  • Ability to read/write calendar events (for syncing)

Scopes:

  • openid
  • userinfo.email
  • userinfo.profile
  • calendar

Microsoft (via Microsoft Graph scopes):

  • Basic profile information (name, email)
  • Calendars you own or have access to
  • Ability to read/write calendar events

Scopes:

  • User.Read
  • Calendars.ReadWrite
  • Calendars.ReadWrite.Shared

We only use these permissions for calendar synchronization and showing your availability.

1.3 Automatically Collected

  • Device information
  • Logs (error logs, API logs)
  • IP address (for security)

2. How We Use Your Information

We use your data to:

  • Sync your calendars across providers
  • Display your events in a unified interface
  • Detect scheduling conflicts
  • Provide booking availability
  • Send notifications
  • Improve our service and troubleshoot issues

We never sell your data.

3. How We Store and Protect Your Data

  • OAuth tokens are encrypted and stored securely
  • Calendar data is cached only as needed for syncing
  • We follow industry-standard security practices (TLS, encryption, access control)

Your calendar content is never shared with third parties.

4. Third-Party Services

We connect only to:

  • Google APIs
  • Microsoft Graph API

These services are used solely to retrieve and sync your calendars.

5. Data Sharing

We may share data only when required:

  • With your explicit permission
  • To comply with legal obligations
  • To protect the security or integrity of our platform

We never sell or rent personal data.

6. Your Rights

Depending on your location, you may have rights such as:

  • Access your data
  • Delete your data
  • Revoke calendar access
  • Disconnect accounts
  • Export your data

You can manage connections directly from your SlotSync dashboard.

7. Data Deletion

When you delete your account:

  • All OAuth tokens are removed
  • Cached calendar data is deleted
  • Event metadata stored for sync is deleted

You may also revoke access instantly from:

  • Google Security Settings
  • Microsoft Account Permissions

8. Children's Privacy

SlotSync is not intended for individuals under 18.

9. Changes to This Policy

We may update this policy. Updates will be posted on this page.

10. Contact Us

If you have questions about privacy or data handling: