Privacy Policy

Who runs this site

calendar.chirotpal.com is the personal booking page of Chirotpal Das (das.chirotpal@gmail.com), operated as an individual on a personal domain. It is not run by a company, has no employees, and is not offered as a service to anyone else.

What the site does

• Lets you pick an available time on Chirotpal's calendar.
• Creates a calendar event on Chirotpal's Google Calendar, with a Google Meet link when the event type calls for it.
• Emails Chirotpal a short notification each time a booking is made, rescheduled, or cancelled.

What we collect from you

When you book a slot, the form collects:

• Your name.
• Your email address.
• Your timezone (auto-detected from your browser).
• Any notes you type into the booking form.
• Answers to any custom questions the event type asks.
• Optional file attachments, only when the event type has attachments enabled. Files are sent straight to Chirotpal as email attachments and are never stored in the database.

The site does not use cookies for bookers. A single signed session cookie is set only when Chirotpal signs into the dashboard.

How we use your data

• Your name, email, timezone, notes, and answers are stored on the booking record so Chirotpal can prepare for the meeting.
• Your email is passed to Google Calendar as a meeting attendee so that you receive the calendar invite and the Google Meet link.
• Cancel and reschedule links unique to your booking are emailed to you (via Google) so you can change your booking later.

Google Calendar data

Because this is a single-user app, the only Google account ever connected is the owner's own. When Chirotpal authorizes the site against his Google account, the site receives an OAuth access token and refresh token. These tokens are encrypted at rest with a key that lives only on the server. The tokens are used only to:

• Read busy time on Chirotpal's calendar so the booking page knows which slots are still free.
• Create new events on Chirotpal's calendar when a booking is confirmed.
• Add a Google Meet link to those events when requested.
• Update or delete those events when a booker reschedules or cancels.

This site does not read any other Google data, does not share Google data with anyone, does not sell Google data, does not use Google data for advertising, and does not use Google data to train AI models. Use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Where your data is stored

All booking data lives in a SQLite database file on the server that runs this site. Owner notification emails are delivered through a third-party email provider (Resend or Gmail SMTP, depending on the site's configuration). The only third party that ever sees booker data is Google (for the calendar invite) and the email provider in use.

How long we keep your data

• Confirmed bookings: kept until 90 days after the meeting ends, then deleted.
• Cancelled or rescheduled bookings: kept up to 30 days for the owner's reference, then deleted.
• Ephemeral (quick) links and their bookings: deleted on the next dashboard reload once every meeting under them has ended.
• Server logs: kept up to 7 days.

Your choices

• Cancel a booking: click the cancel link in your confirmation email.
• Reschedule a booking: click the reschedule link in your confirmation email.
• Request deletion of all data tied to your email: send a request to das.chirotpal@gmail.com. Confirmed within 30 days.

Children

This site is not intended for use by people under 13. Do not book a slot if you are under 13.

Changes to this policy

If this policy changes, the updated version replaces this one and the date at the top is refreshed. Material changes will be communicated on the site.

Contact

Privacy questions: das.chirotpal@gmail.com.