Privacy Policy

When you connect your Google Calendar to Tymely, we request these Google scopes:

• Calendar read access (calendar.readonly): used only to determine your free and busy status, so we can display accurate available time slots to people booking with you.
• Calendar event creation (calendar.events): used only to create a calendar event on your calendar when someone books a time with you, and to send the resulting invite.
• Basic profile information (name, email address, profile photo): used to identify your account and sign you in.

When a visitor books a meeting through your Tymely page, we also collect the information they submit, such as their name, email address, and any notes they add. We additionally collect account information you provide directly, such as your chosen display name, custom booking link, and any logo you upload, and basic technical information such as your browser type and IP address, used for security and abuse prevention.

We use the data described above solely to operate and improve Tymely: to show accurate availability, to create calendar events when bookings are confirmed, to authenticate you, to display your branded booking page, to provide customer support, and to maintain the security and integrity of the service. We do not read the contents, titles, or descriptions of your existing calendar events beyond what is needed to determine busy and free time blocks. We do not sell, rent, or share your Google user data with third parties, and we do not use it for advertising.

We do not share your personal data with third parties except in the following limited circumstances: with service providers who process data on our behalf to operate Tymely (such as our hosting, database, and file storage providers, each bound by confidentiality and data protection obligations), when someone books a meeting with you (their submitted information is shared only with you, the calendar owner), when required to comply with applicable law, legal process, or a valid governmental request, or to protect the rights, property, or safety of Tymely, our users, or the public. If Tymely is ever involved in a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction, subject to this Privacy Policy.

Tymely uses a small number of cookies. Strictly necessary cookies (such as your sign-in session) are always active because the service cannot function without them. With your consent, we may also use functional, performance, or targeting cookies. You can review and change your preferences at any time using the cookie preference banner that appears on your first visit, or by clicking "Cookie Settings" in the footer of any page. Rejecting non-essential cookies will not affect your ability to use Tymely's core features.

All data in transit between your browser, Tymely, and Google is encrypted using HTTPS/TLS. Your Google OAuth refresh token and other account data are stored in an access-controlled production database, encrypted at rest by our database provider, and reachable only by Tymely's backend services over an authenticated, encrypted connection. We never store your Google password; authentication is handled entirely by Google's own OAuth 2.0 flow. Access to production data is limited to the personnel who operate the service, and we do not use your Google user data to train AI or machine learning models.

We retain your Google OAuth refresh token and account data for as long as your Tymely account remains active, so your booking page can continue to function. If you stop using Tymely, that data is retained only until you delete your account.

You can permanently delete your account and all associated data at any time from your dashboard using the "Delete account" option. Deleting your account immediately and permanently removes your Google refresh token, profile information, booking page, and booking history from our database; this action cannot be undone. You can separately revoke Tymely's access to your Google account at any time from your Google Account permissions page. You may also request deletion by emailing us at the address below; we will process such requests within 30 days.

Depending on where you live, you may have the right to access the personal data we hold about you, correct inaccurate data, request deletion of your data, receive a copy of your data in a portable format, object to or restrict certain processing, and withdraw consent at any time (which will not affect the lawfulness of processing already carried out). To exercise any of these rights, use the self-serve options in your dashboard or contact us at the email address below. We will respond to verifiable requests within the timeframes required by applicable law.

Tymely's infrastructure providers may process and store data in countries other than your own. Where we transfer personal data internationally, we take reasonable steps to ensure it receives an adequate level of protection consistent with this Privacy Policy and applicable law.

Tymely is not directed to, and is not intended for use by, anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

Tymely's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Continued use of Tymely after changes take effect constitutes your acceptance of the revised policy.

Questions about this policy, or requests relating to your personal data, can be sent to hello@hayatnestconsulting.com.