Privacy Policy

Introduction

tokipick ("the Service") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we handle information in the Service.

Information We Collect

The Service collects the following information:

• Your name (optionally entered when creating events or responding)
• Timezone information (automatically detected from your browser)
• Event information (title, candidate dates/times, response data)

When using the Google Calendar integration, we collect your Google account email address and profile information. We do not collect email addresses or passwords through any other means.

Google Account Integration

The Service uses Google account authentication (OAuth 2.0) when you choose to use the Google Calendar integration (optional feature). The following information is collected during integration:

• Email address, name, and profile picture
• Read access to your Google Calendar free/busy information
• Create events on your Google Calendar (when generating Google Meet links)

Authentication credentials (access tokens and refresh tokens) are stored on our servers and used solely to provide the calendar integration feature.

Handling of Google Calendar Data

The Service handles Google Calendar data as follows:

• Only free/busy status (FreeBusy) is read from your calendar. Event titles, descriptions, and attendee information are not accessed
• A single calendar event with a Google Meet link is created only when the organizer confirms a date and time. Existing events are never read, modified, or deleted
• Free/busy information is used only for display during your session and is not permanently stored on our servers

Revoking Access

You can revoke Google Calendar integration at any time. Visit your Google Account settings (https://myaccount.google.com/permissions) to remove tokipick's access.

Google API Services User Data Policy

The Service's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements. Data obtained is used only for the purposes described in this policy and is not shared with or sold to third parties, nor used for advertising purposes.

Sharing, Transfer, and Disclosure of Google User Data

tokipick does not share, transfer, or disclose Google user data to any third parties, except in the following limited circumstances:

• When required by applicable law, regulation, legal process, or enforceable governmental request
• With your explicit consent
• With service providers (such as our database hosting provider) who process data on our behalf and are bound by contractual obligations to keep data confidential and secure, and not to use it for any purpose other than performing services for us

We never sell, rent, or trade Google user data. We do not use Google user data for advertising, retargeting, or any purpose unrelated to providing the calendar integration feature.

Data Protection Measures

tokipick implements the following security measures to protect your data, including Google user data:

• All data transmitted between your browser and our servers is encrypted using HTTPS (TLS)
• Google OAuth tokens (access tokens and refresh tokens) are stored in an encrypted database with access restricted to authorized application processes only
• Access to stored data is limited to the minimum necessary for providing the Service's functionality
• Google Calendar free/busy data is processed in memory during your session only and is not written to persistent storage
• All event data and associated authentication data are automatically deleted 30 days after creation

Use of Cookies

The Service uses cookies and similar technologies for the following purposes:

• Google Analytics: To analyze usage patterns and improve the Service
• Google AdSense: To display advertisements based on user interests

For information about Google's use of cookies, please refer to Google's Privacy Policy. You can disable cookies through your browser settings, but some features may be limited.

About Google Analytics

The Service uses Google Analytics, a web analytics service provided by Google. Google Analytics uses cookies to collect traffic data. This traffic data is collected anonymously and does not identify individuals.

About Google AdSense

The Service uses Google AdSense, an advertising service provided by Google. Google AdSense may use cookies to display ads based on user interests. If you do not wish third-party ad providers to use cookies, you can opt out through Google's ad settings page.

Data Retention and Deletion

Event data and response data stored in the Service are automatically deleted 30 days after creation. Deleted data cannot be recovered.

Disclosure to Third Parties

The Service does not provide personal information to third parties except as required by law. For specific details regarding Google user data, please see the "Sharing, Transfer, and Disclosure of Google User Data" section above.