Privacy Policy
Your privacy is important to us. This policy explains what information we collect, how we use it, and your choices. By using this service, you agree to the practices described here.
Information We Collect
- Account information: name, email address, and password (hashed).
- Scheduling details: meeting subject, invitee name and email, selected times, optional notes, and guests.
- Calendar integrations: if you connect Google Calendar, we store tokens required to create and update events on your behalf and metadata necessary to keep bookings in sync.
- Usage data: basic app activity and diagnostic logs to maintain reliability and prevent abuse.
How We Use Information
- Provide, operate, and improve scheduling features.
- Create calendar events and send confirmations/reminders you enable.
- Maintain account security and prevent misuse.
- Communicate service updates and important notices.
Google Calendar
When you connect Google Calendar, we request the minimum scopes needed to manage events you create via this app. Tokens are stored securely and used only to perform actions you initiate (e.g., creating, updating, or cancelling booked events). You can disconnect at any time and revoke access via your Google Account security settings.
OAuth access tokens are stored in our database and used only by the server to call Google APIs. We do not send your Google tokens to third parties such as email providers, Make.com, BotPenguin, or ManyChat.
Sharing and Disclosure
We do not sell your data and we do not share Google user data with advertisers or data brokers. We disclose information only to provide the service, comply with law, or with your consent. Specifically regarding Google user data obtained via Google APIs, we may share or transfer data to the following service providers:
- Google Calendar APIs: to read free/busy information and to create, update, and cancel calendar events and Google Meet links you request. We do not expose your calendar contents; availability is computed server‑side and presented as time slots.
- Email delivery SMTP provider (Hostinger): to send booking confirmations, updates, and notifications to participants (coach, visitor, owner/admin). These emails may include event details and the Google Meet link.
- Automation platform (Make.com webhook): we may send booking metadata (coach name, visitor email, booking time, timezone) to a webhook URL to trigger the workflows.
- BotPenguin: we update your existing contact with booking time and coach name to keep your CRM/chat records in sync. We do not create new contacts or upload entire calendars.
-
ManyChat: if configured, we look up a contact by email. If found, we add the tag
lead_from_website_botand update the30min_booking_time(stored in UTC) anddemo_session_coachfields. If not found, we create a new contact with your email (with opt‑in for email) and then apply the same tag and fields. -
FluentCRM (your WordPress CRM): if configured, we add or update a contact with your name and email, mark status as
Subscribed, and add you to the listWEBSITE 1 TO 1 SESSIONS. - Hosting and infrastructure providers (Hostinger): to operate, store, and secure the service.
Human access to Google user data is limited to troubleshooting, security, and fraud prevention, or where you explicitly ask us to assist.
Google API Services
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve user‑facing features you enable in this app; we do not use it for advertising and we do not sell it. Transfers are limited to the service providers listed above solely for the purposes described.
Data Retention
Booking records and related metadata are retained to support your scheduling history and auditability. You may request deletion of your account data by contacting support.
Cookies
We use essential cookies and session storage to keep you signed in and remember preferences such as time zone. We do not use cookies for third‑party advertising.
Security
We take reasonable measures to protect your information, including encrypting credentials at rest when stored and using TLS in transit. No method of transmission or storage is 100% secure; please use strong passwords and protect your account.
Your Choices
- Access, update, or delete your account information from the account settings page.
- Disconnect Google Calendar at any time.
- Contact us for data inquiries or deletion requests.
Contact
For questions about this policy or privacy requests, contact: info@truecosmic.com