Privacy Policy

1. Information We Collect

We collect account information, booking data, contact details, and technical usage information required to operate BookSafe.

2. How We Use Information

We use data to provide booking functionality, support customer communication, improve platform performance, and maintain account security.

3. Data Sharing

We do not sell personal data. We share data only with service providers required to run core platform functions (for example hosting and payments).

4. Data Retention

We retain data as long as needed to provide services, comply with legal obligations, and resolve disputes.

5. Google Sign-In

If you choose to sign in with Google, BookSafe requests the following OAuth 2.0 scopes:

• openid — to authenticate your Google identity
• userinfo.email — to read your verified email address for account matching and login
• userinfo.profile — to read your basic profile information (for example your display name)

These identity scopes are used only for authentication and account setup. They do not grant access to your Google Calendar data.

6. Google Calendar Integration

If you choose to connect your Google Calendar, BookSafe requests access to the following Google OAuth 2.0 scopes:

• calendar.events — to create, update, and delete booking appointments on your calendar
• calendar.readonly — to read your existing calendar events and check your availability to avoid scheduling conflicts

We store OAuth access tokens and refresh tokens to maintain the calendar connection without requiring you to re-authenticate on every booking. These tokens are stored encrypted at rest in our database and are never shared with third parties beyond Google's own API services.

We do not store your Google password. Access tokens are transmitted only over HTTPS (TLS) and are used exclusively to synchronise booking appointments with your calendar. You can revoke BookSafe's access to your Google Calendar at any time via your Google Account permissions page or from the integrations section of your BookSafe dashboard, which will immediately delete the stored tokens from our systems.

7. Your Rights

You can request access, correction, or deletion of personal data by contacting us through the support channel on our Contact page.