Privacy Policy - FlowReserve

1. Introduction

FlowReserve ("we", "our", or "us") operates the FlowReserve appointment booking platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and profile information. If you sign up using Google OAuth, we receive your name, email, and profile picture from Google.

Google Account Data

If you sign in with Google, we request access to your basic profile information (name, email address, and profile picture) via the openid, email, and profile OAuth scopes. This data is used solely to create and maintain your FlowReserve account.

Google Calendar Data

If you optionally connect your Google Calendar, we request the calendar.events scope. We use this access to:

Read your calendar event times (start/end) to check for scheduling conflicts and prevent double-bookings
Create new calendar events for confirmed appointments

We do not read, store, or share the content, titles, descriptions, or attendees of your personal calendar events. We only check time-based availability. Your Google OAuth access and refresh tokens are stored encrypted in our database and are used solely to maintain the calendar connection. These tokens are immediately deleted when you disconnect Google Calendar from your settings or when you delete your account.

Booking Information

We collect information provided during the booking process, including client names, email addresses, phone numbers, and responses to intake forms configured by service providers.

Payment Information

Payment processing is handled by PayPal. We support multicurrency pricing, allowing service providers to set prices in various currencies. We do not store credit card numbers or bank account details. We only store transaction identifiers, currency information, and payment status for record-keeping.

Usage Data

We collect anonymized analytics data (page views, feature usage) through Vercel Analytics to improve the service. This data does not personally identify you.

3. How We Use Your Information

To provide and maintain the booking platform
To process appointments and send booking confirmations, reminders, and cancellation notifications
To sync with your Google Calendar for availability checking and booking creation
To process payments through PayPal
To send service-related emails (account updates, trial notifications, payment receipts)
To improve the platform based on anonymized usage patterns

4. Google API Services User Data Policy

FlowReserve's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In compliance with the Limited Use requirements, FlowReserve:

Only uses Google user data to provide and improve user-facing features of the FlowReserve platform (availability checking and calendar event creation), as described in this privacy policy.
Does not transfer Google user data to third parties unless necessary to provide or improve user-facing features, with user consent, for security purposes, or to comply with applicable laws.
Does not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
Does not allow humans to read Google user data unless we have your affirmative agreement for specific messages, it is necessary for security purposes such as investigating abuse, to comply with applicable law, or the data has been aggregated and anonymized and is used for internal operations.

5. Data Sharing

We do not sell your personal information. We share data only with:

Supabase — our database and authentication provider
PayPal — for payment processing
Resend — for transactional email delivery
Google — for calendar integration (only when you connect your calendar)
Vercel — our hosting provider and analytics

These providers only receive data necessary to perform their services and are bound by their own privacy policies.

6. Data Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), Row Level Security on our database ensuring users can only access their own data, secure webhook signature verification for payment events, and server-side authentication for all protected routes.

7. Data Retention and Deletion

We retain your account data for as long as your account is active. Booking records are retained for business record-keeping purposes.

Google data: Google OAuth tokens (access and refresh tokens) are stored only while your Google Calendar integration is active. Tokens are permanently deleted when you disconnect Google Calendar from your dashboard settings or when you delete your account. We do not retain any Google Calendar event data after it has been used for real-time availability checking.

Account deletion: You can permanently delete your account at any time from the Settings page in your dashboard. Deleting your account removes your profile, booking types, availability schedules, appointments, API keys, and Google tokens. Calendar events previously created in your Google Calendar by FlowReserve will remain in your Google Calendar and can be removed directly from Google.

8. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Delete your account and all associated data from the Settings page in your dashboard
Disconnect Google Calendar at any time from your FlowReserve settings, which immediately deletes stored tokens
Revoke FlowReserve's access to your Google Account at any time from your Google Account permissions
Export your booking data

9. Cookies

We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at support@flowreserve.space.