Information we collect
When you request or manage an appointment, we may collect:
- your name, email address, telephone and WhatsApp numbers;
- the service, appointment format, date and time you request;
- notes you choose to provide; and
- booking status, approval, reminder and delivery records needed to operate the service.
How we use booking information
We use this information to check availability, review short-notice requests, confirm or decline appointments, communicate changes, send necessary reminders, prevent duplicate bookings, provide customer support and keep operational records.
Google Calendar data
The booking service requests Google's Calendar Events permission, which allows it to view and edit events on all calendars in the authorised Google Account. The service uses that permission only with the business owner's calendar selected in its server configuration.
For a confirmed appointment, the service sends the customer's booking details to that calendar to create an event. It finds and reads booking-service events, updates rescheduled events, removes cancelled events and repairs missing or stale booking events. It does not copy or retain the contents of unrelated calendar events, and it does not request access to Gmail, Google Contacts, Google Drive or other unrelated Google Account data.
The Google OAuth refresh credential is encrypted before it is stored in the server's protected production environment. The service also stores the event identifier and, when available, the Google Calendar event and Google Meet links in the secured booking record. The credential is not included in customer messages or booking records.
Google Calendar data is used only to operate appointment scheduling and is not used for advertising, profiling or sale. A Google Meet link may be delivered to the relevant customer through transactional email or WhatsApp. Otherwise, Calendar data is shared only with the service providers listed below where needed to operate and secure the integration, or where disclosure is required by law.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Service providers
We use service providers only where needed to run the booking service:
- Vercel for website and server hosting;
- Supabase for secured booking records and scheduling operations;
- Google Calendar for confirmed appointment events;
- Resend for transactional email; and
- WATI and WhatsApp for configured appointment notifications.
We do not sell personal information. Providers process information under their own terms and privacy commitments.
Retention, security and choices
We retain appointment information only as long as reasonably needed to deliver the service, maintain business and security records, resolve disputes and meet legal obligations. We use access controls, encrypted credentials and restricted management links to protect booking information, but no online system can guarantee absolute security.
You may ask to access, correct or delete your booking information, subject to records we must retain by law or for legitimate business purposes. The Google Account owner can revoke Calendar access at any time from the Google Account's third-party connections settings; future automatic calendar updates will then stop.
Contact
For privacy questions or requests, contact Erick Kraftsman Limited at contact@erickkraftsman.com.
Erick Kraftsman Limited operates from Accra, Ghana.