Legal

Privacy Policy

Last updated: May 2026

What we collect

We collect your name, email address, and password when you create an account. We also store meeting details, availability preferences, and timezone settings you configure within the app. We do not sell your data to third parties.

Google Calendar integration

Permissions requested

If you connect your Google Calendar, TimeEzy requests the following OAuth2 scopes:

  • calendar.readonly — to read your existing calendar events so we can display them alongside your TimeEzy meetings and detect scheduling conflicts when you create new meetings or booking slots.
  • calendar.events — to create new calendar events on your behalf when a guest confirms a booking through your TimeEzy booking link.

Data accessed

TimeEzy accesses only event titles, start and end times, and busy/free status from your primary Google Calendar. We do not access event descriptions, attendee lists, video call links, attachments, or any other calendar fields.

Data usage

Google Calendar data is used exclusively to provide the following in-app features:

  • Displaying your calendar events on your private TimeEzy calendar page.
  • Warning you of scheduling conflicts when creating meetings or booking slots.
  • Hiding unavailable time slots from your public booking page.
  • Writing a new event to your calendar only when a guest confirms a booking — no events are created without a confirmed booking action.

TimeEzy's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements. Google Calendar data is never used for advertising, profiling, data brokering, or any purpose beyond the in-app features described above.

Data storage & security

Your Google OAuth tokens are stored encrypted in our database and used solely to make authorised Google Calendar API calls on your behalf. Token data is never shared with third parties, never used for advertising, and never used to train AI or machine learning models.

Human access

No TimeEzy employee or contractor reads your Google Calendar data. Automated systems process calendar data only as described above. The only exception would be if you explicitly ask us to investigate a support issue affecting your calendar integration, in which case we would request your consent first.

Your control

You can revoke Google Calendar access at any time by visiting myaccount.google.com/permissions and removing TimeEzy, or by disconnecting from your TimeEzy Settings page. Deleting your TimeEzy account permanently removes all stored tokens and calendar data from our systems.

Zoom integration

Permissions requested

If you connect your Zoom account, TimeEzy requests the following OAuth2 scopes:

  • meeting:write — to create, update, and delete Zoom meetings on your behalf.
  • meeting:read — to read meeting details associated with your account.
  • user:read — to retrieve your Zoom user ID and email address for account linking.
  • report:read — to fetch participant attendance data after a meeting ends.

Data accessed

TimeEzy accesses your Zoom user ID, connected email address, and OAuth tokens. When you create a meeting, we store the Zoom meeting ID, join URL, and password. When participants join or leave, we record their name, email (if provided by Zoom), join time, leave time, and duration.

Data usage

Zoom data is used exclusively to:

  • Automatically create a Zoom meeting link when you schedule a new meeting in TimeEzy.
  • Update or delete that Zoom meeting if you edit or delete the TimeEzy meeting.
  • Display join links on your meeting's shareable page and in your dashboard.
  • Record participant attendance for your own reference.

Zoom data is never used for advertising, profiling, or any purpose beyond the features described above.

Data storage & security

Your Zoom OAuth tokens are stored encrypted in our database. They are used solely to make authorised Zoom API calls on your behalf and are never shared with third parties.

Human access

No TimeEzy employee or contractor accesses your Zoom data. Automated systems process it only as described above.

Your control

You can disconnect Zoom at any time from your TimeEzy Settings page, or by removing TimeEzy from your Zoom App Marketplace account. On disconnection, all stored Zoom tokens and Zoom meeting data are permanently deleted from our systems.

How we use it

Your data is used solely to provide the TimeEzy service — showing meeting times in the correct timezone, sending meeting invitations, and powering the availability planner. We use Resend to send transactional emails (meeting invites, password resets). We do not use your data for advertising.

Data storage

Your data is stored securely on Supabase (PostgreSQL) hosted on AWS infrastructure. Passwords are hashed using bcrypt and are never stored in plain text. We use HTTPS for all data in transit.

Cookies and sessions

We use a session cookie to keep you signed in. This cookie contains only a session token — no personal data is embedded in it. We do not use tracking or advertising cookies.

Your rights

You have the right to access the personal data we hold about you, request a correction if anything is inaccurate, and request deletion of your account and all associated data at any time. You also have the right to data portability — to receive a copy of your data in a portable format — and the right to object to or restrict how we process your data. To exercise any of these rights, email us and we will respond within 5 business days. If you delete your account, all your data — including any integration tokens — is permanently removed from our systems. To revoke Google Calendar access without deleting your account, visit myaccount.google.com/permissions and remove TimeEzy. To revoke Zoom access, disconnect from your TimeEzy Settings page or remove TimeEzy from your Zoom App Marketplace account.

Third-party services

TimeEzy uses Vercel for hosting, Supabase for the database, Resend for email delivery, the Google Calendar API for calendar integration, and the Zoom API for meeting creation. Each of these services has their own privacy policy. We share only the minimum data required for each service to function. Google Calendar data is accessed solely through Google's official OAuth2 API and is governed by Google's API Services User Data Policy. Zoom data is accessed solely through Zoom's official OAuth2 API.

Changes to this policy

If we make material changes to this policy, we will notify you by email or by displaying a notice within the app before the changes take effect.

Contact

Questions about privacy? Email us and we'll respond within 5 business days.