Privacy Policy
We take your privacy seriously. This policy explains how we collect, use, and protect your information.
Last updated: August 13, 2025
Information We Collect
Account Information
When you create an account, we collect your email address and any profile information you provide. This helps us provide personalized service and communicate with you about your account.
Event and Booking Data
We store event details, booking information, and attendee data that you create or import through Google Sheets integration. This includes names, email addresses, phone numbers, and event preferences.
Google Integration Data
With your explicit consent through Google OAuth, we access your Google Sheets and Google Calendar data to synchronize events and bookings. Specifically:
- • Google Sheets: Read and write access to spreadsheets you designate as booking templates
- • Google Calendar: Create and manage calendar events for confirmed bookings
- • Google Drive: Store event images and access shared spreadsheets
We only access the specific data you authorize and never access other Google services or personal files without permission. You can revoke this access at any time through your Google Account settings.
Usage Analytics
We collect anonymized usage data to improve our service, including feature usage patterns and performance metrics. This data cannot be used to identify individual users.
Cookies and Tracking
We use cookies to enhance your experience and provide essential functionality:
- • Functional Cookies: Remember your dashboard tab preferences and interface settings with your consent
- • Analytics Cookies: Optional cookies that help us understand how you use our service (anonymized data only)
- • Marketing Cookies: Currently not used, but may be offered as an option in the future
You have full control over cookie preferences through our cookie consent modal, which appears on your first visit and can be accessed anytime. All preferences are stored for 1 year and you can change them at any time.
How We Use Your Information
- •Provide and maintain our calendar and booking management services
- •Synchronize your events between Google Sheets, Google Calendar, and Golendar
- •Send you important notifications about bookings and account updates
- •Improve our services through analytics and user feedback
- •Provide customer support and respond to your inquiries
- •Ensure security and prevent fraudulent activities
Data Protection & Security
Encryption
All data is encrypted in transit using TLS/SSL and at rest using industry-standard encryption methods. Your Google API tokens are securely encrypted and stored.
Access Controls
We implement strict access controls and authentication mechanisms. Only authorized personnel have access to systems containing personal data, and all access is logged and monitored.
Data Minimization
We only collect and process data that is necessary for providing our services. We regularly review and delete data that is no longer needed.
Your Rights
You have the following rights regarding your personal data:
- •Access: Request a copy of your personal data
- •Correction: Update or correct inaccurate information
- •Deletion: Request deletion of your account and associated data
- •Portability: Export your data in a machine-readable format
- •Withdraw Consent: Revoke Google integration permissions at any time
- •Cookie Management: Change your cookie preferences through our consent modal or browser settings
Account Deletion
You have complete control over your account and data. You can delete your account at any time through your account settings.
How to Delete Your Account
To delete your account:
- 1. Sign in to your Golendar account
- 2. Go to Settings → Account tab
- 3. Click "Delete Account" in the Danger Zone
- 4. Type "DELETE MY ACCOUNT" to confirm
- 5. Your account and all data will be permanently deleted
What Gets Deleted
When you delete your account, we permanently remove:
- • Your Golendar account and profile information
- • All your booking sheet templates and configurations
- • All booking records and analytics data
- • Your subscription (automatically canceled)
- • All API keys and integrations
- • Any stored preferences and settings
What is NOT Deleted
Important: Your Google account and Google data remain completely untouched:
- • Your Google account remains active and accessible
- • All Google Calendar events and data are preserved
- • All Google Sheets and Drive files remain in your Google account
- • Any other Google services or data are unaffected
You retain full ownership and control of your Google data after account deletion.
Deletion Process
- • Immediate: Your subscription is canceled with Stripe (if applicable)
- • Immediate: All your data is permanently deleted from our databases
- • Immediate: Your account access is revoked and you are signed out
- • Complete: The entire deletion process happens instantly when you confirm
There are no waiting periods - your account and data are completely removed the moment you confirm deletion.
Note: Account deletion is permanent and cannot be undone. If you're unsure, consider canceling your subscription instead, which allows you to reactivate later.
Third-Party Services and Data Sharing
We share your information with the following third parties to provide our Service. Each third party receives only the minimum data necessary to fulfill their specific function:
Google APIs and Services
We integrate with Google Sheets, Google Calendar, and Google Drive through official Google APIs. This integration is essential for the core functionality of Golendar.
Data Shared:
- • OAuth authentication tokens (encrypted)
- • Spreadsheet data for your booking templates and configurations
- • Calendar event data for appointments and bookings
- • Drive file metadata for organizing your documents
Purpose: Core service functionality - managing bookings, syncing calendars, and storing templates
Privacy Policy: https://policies.google.com/privacy
Supabase (Database and Authentication Provider)
We use Supabase for user authentication and storing application metadata.
Data Shared:
- • Email address and authentication credentials
- • User profile information
- • References to your Google Sheets and Calendars
- • Subscription and billing status
- • Analytics and usage metrics
Purpose: User authentication, data storage, and application functionality
Privacy Policy: https://supabase.com/privacy
Stripe (Payment Processing)
We use Stripe to process payments securely. We do not store your payment card information on our servers.
Data Shared:
- • Billing name and address
- • Payment method details (processed directly by Stripe)
- • Subscription plan information
- • Transaction history
Purpose: Payment processing and subscription management
Privacy Policy: https://stripe.com/privacy
Vercel (Hosting and Infrastructure)
We use Vercel to host our application and deliver it to users globally.
Data Shared:
- • IP addresses and browser information
- • Usage analytics and performance metrics
- • Application logs for debugging
- • Cookies for session management
Purpose: Application hosting, content delivery, and performance monitoring
Privacy Policy: https://vercel.com/legal/privacy-policy
Google Analytics (Website Traffic Analysis)
We use Google Analytics to understand how visitors interact with our website and improve user experience.
Data Shared:
- • IP addresses (anonymized)
- • Browser type and version
- • Operating system
- • Pages visited and time spent
- • Referral sources
- • Geographic location (country/city level)
- • Device information
- • User behavior patterns and interactions
Purpose: Website traffic analysis, user experience optimization, and performance monitoring
Opt-out: You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on
Privacy Policy: https://policies.google.com/privacy
Google User Data Policy
Important: We DO NOT share, transfer, or disclose your Google user data (including Google Sheets, Google Calendar, and Google Drive data) with any third parties. Your Google data remains exclusively between you and Golendar for the sole purpose of providing our service functionality.
- • No Data Sales: We never sell your Google data to third parties
- • No Marketing Use: Your Google data is never used for marketing or advertising
- • No Third-Party Access: Only you and authorized Golendar systems can access your Google data
- • Data Isolation: Your Google Sheets and Calendar data remains in your own Google account
Non-Google Data Sharing
For non-Google data (such as account information and usage analytics), we may share information only in these limited circumstances:
- • With Your Consent: When you explicitly agree to share information with specific parties
- • Legal Compliance: To comply with laws, regulations, court orders, or legal requests
- • Business Transfers: In connection with a merger, acquisition, or sale of assets
- • Protection of Rights: To protect our rights, property, or safety, or that of our users
- • Aggregated Data: We may share anonymized, aggregated data that cannot identify you personally
Data Minimization Principle
We follow the principle of data minimization - we only share the minimum amount of data necessary with each third party to provide their specific service. We never sell your personal information to third parties for marketing purposes.
Data Retention
We retain your data only as long as necessary to provide our services and comply with legal obligations:
- • Active account data: Retained while your account is active and you use our services
- • Deleted account data: Immediately and permanently removed when you delete your account
- • Analytics data: We use privacy-focused, anonymized analytics that cannot be traced back to individual users
- • Legal obligations: No personal data is retained for legal purposes after account deletion
We do not maintain separate backups of deleted user data. When you delete your account, all your personal information is immediately and permanently removed from all our systems.
Contact Us
If you have questions about this Privacy Policy or want to exercise your rights, please contact us:
Email: hello@golendar.com
Response time: Within 72 hours for privacy-related inquiries
Legal Basis and Compliance
We process your personal data under the following legal bases:
- • Contract Performance: Processing necessary to provide our booking management services
- • Consent: Google API access and optional analytics cookies (withdrawable at any time)
- • Legitimate Interests: Service improvement, security, and fraud prevention
This Privacy Policy complies with GDPR, CCPA, and Google's API Services User Data Policy. We are committed to protecting your privacy rights regardless of your location.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email and by posting the updated policy on our website. Your continued use of our services after any changes indicates your acceptance of the updated policy.