1. Data Collected
We collect the following information:
- First name, last name
- Company name
- Company registration number
- Email address
- Phone number
- Login and browsing data
- Payment information (managed by Stripe, we do not store your banking details)
- Google Calendar data (if you choose to connect your Google account)
2. Use of Data
We use your data to:
- Create and manage your user account.
- Manage subscriptions and payments via Stripe.
- Provide assistance through our customer support.
- Enable internal messaging features.
- Allow communication between professionals and clients, including outside the platform.
- Synchronize your appointments with Google Calendar (if you have connected your Google account).
- Improve the user experience on the platform.
3. Google Data Protection
When you connect your Google account to our platform, we access your Google Calendar data only to synchronize your appointments. Here is how we protect this data:
- Limited access: We only access calendar data necessary for appointment synchronization. We do not request access to other Google services.
- Encryption: All communications between our platform and Google services are encrypted via HTTPS/TLS. Authentication tokens are stored securely and encrypted.
- No sharing: Your Google data is never sold, shared with third parties, or used for advertising purposes.
- Minimal storage: We only store essential information (secure access tokens). Calendar data is synchronized in real time and is not retained on our servers beyond what is necessary for the service to function.
- Revocation: You can revoke access to your Google account at any time from your account settings or directly from your Google account security settings.
- Compliance: Our use of Google data complies with the Google API Services User Data Policy, including limited use requirements.
4. Data Sharing
Your data is never sold. It may be shared with:
- Stripe (secure payment processing)
- Google Analytics (traffic analysis)
- Hosting provider (data storage)
Data from Google Calendar is not shared with any of these third-party services.
5. Data Retention
Your data is retained:
- For the duration of your use of the platform
- For 3 years after the last activity (unless legal obligation requires otherwise)
- Invoices and transactions are kept for 10 years (legal requirement)
- Google tokens are deleted as soon as you disconnect your Google account or delete your account
6. Your Rights
In accordance with GDPR, you have the right to:
- Access your data
- Modify or rectify your information
- Request deletion of your data
- Object to processing
- Request data portability
- Revoke access to your Google data at any time
To exercise these rights, contact us:
Email: support@your-app.example.com
7. Cookies
We use cookies to improve your browsing experience.
You can manage your preferences through your browser settings.
8. Security
We implement security measures to protect your data against unauthorized access:
- Encryption of data in transit (HTTPS/TLS) and at rest
- Secure authentication and session management
- Restricted access to sensitive data (principle of least privilege)
- Access monitoring and logging
- Regular security updates