Privacy Policy

Overview

ShareAvailability.com ("ShareAvailability", "we", "our", "us") is operated by Han Global LLC. ShareAvailability helps you generate a plain-text availability message from your calendar. We take privacy seriously and only access what's required to provide this functionality.

What data we access

When you connect Google Calendar or a Microsoft / Outlook calendar, ShareAvailability requests read-only access to:

Calendar event times: Start time and end time of events (to determine when you're busy). We do not access event titles, descriptions, attendees, locations, or any other event content.
Calendar list metadata: Calendar names and IDs (to let you choose which calendars to include)
All-day event indicators: Whether an event is all-day (to properly calculate availability)

We explicitly do not access:

Event titles or summaries
Event descriptions
Attendee information
Event locations
Event notes or attachments
Any other event content beyond start/end times

We cannot:

Create events
Edit events
Delete events
Send invitations
Modify any calendar data

How your data is used

Your calendar data is used exclusively to:

Calculate available time windows by identifying when you have no scheduled events
Generate a plain-text availability message that you can copy and share
Display which calendars you have available for selection

All processing is automated and programmatic. We only extract start and end times from events to calculate availability windows. No human reviews or reads your calendar event content (titles, descriptions, attendees, etc.).

We do not:

Store your calendar events or event data long-term
Sell, rent, or monetize your calendar or account data
Share your calendar event content with third parties. Account email may be shared with our email processor (Resend) only to deliver messages you opted into (reminder emails or newsletter)
Use your Google or Microsoft Calendar data for advertising or marketing. Your email address is used only to send the optional reminder emails or newsletter you opted into
Auto-enroll you in email because you signed in. Optional reminder emails and the newsletter each require their own explicit opt-in (unchecked by default), described below
Use your data to train AI models or for machine learning
Analyze your data for any purpose other than generating availability
Allow human access to your calendar event content

Authentication & security

We implement security measures to protect your data:

Google and Microsoft authentication are handled via OAuth 2.0, a secure industry-standard protocol
All data transmission is encrypted using HTTPS/TLS
Access tokens are stored securely in encrypted HTTP-only cookies and used only to fetch calendar data
We use read-only access, preventing any modification of your calendar
You can disconnect ShareAvailability at any time, which immediately revokes all access

While we implement reasonable security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your privacy.

Data retention and deletion

ShareAvailability does not store your calendar events or event details. Here's what we do and do not keep:

Account basics: Your email, name, and profile photo from Google and/or Microsoft are stored so we can identify your account and show your avatar when you return. If you connect both calendars, both OAuth identities stay on the same app user even when the emails differ.
Timezone and preferences: Your timezone, working hours, date-range preferences, formatting options, and selected calendar IDs are saved (in our database and mirrored in your browser) so you do not have to reconfigure the tool every visit.
Usage events: We record high-level product events (such as sign-in, generate, and copy) to understand reliability and improve the service. These do not include calendar event content.
Optional reminder emails: If you tick the opt-in checkbox, we store your email address, consent wording and time, and send/unsubscribe state so we can deliver at most one welcome email and at most one Sunday reminder per week. Calendar event content is not used for these emails.
Email delivery events: For reminder and related mail we keep a log of delivery events (sent, delivered, bounced, complained, delivery delayed) that includes the recipient email address, so we can stop mailing addresses that bounce or complain and measure deliverability.
Calendar events: Fetched on demand when you request availability, processed immediately, and discarded after generating the availability text. Event titles, descriptions, attendees, and locations are never stored.
Availability text: Generated in your browser and kept only in memory until you copy it or leave the page.
Access tokens: The active session token is stored in an encrypted HTTP-only cookie. When you link a second calendar provider, refresh tokens for that provider are stored so we can read free/busy from both sources. Disconnecting one provider deletes only that provider's tokens. Event titles and bodies are still never stored.

When you disconnect your calendar, access tokens are revoked and deleted. You can also revoke access at any time through your Google Account or Microsoft account settings, which immediately stops all calendar access.

To delete your account data (email, name, preferences, and usage history), us and we will remove it.

Third-party services

ShareAvailability uses the following third-party services:

Google Calendar API: To access your Google calendar data. Google's privacy policy applies to their services.
Google OAuth 2.0: For secure Google authentication. Your credentials are handled by Google, not stored by ShareAvailability.
Microsoft Graph / Microsoft identity platform: To access Outlook and Microsoft 365 calendar data with read-only permissions (`Calendars.Read`, `User.Read`). Microsoft's privacy statement applies to their services.
Microsoft OAuth 2.0 (Azure AD): For secure Microsoft authentication (work/school and personal Microsoft accounts). Your credentials are handled by Microsoft, not stored by ShareAvailability.
Supabase: For secure database storage of account information (email, name, avatar URL), preferences, and usage events. Supabase's privacy policy applies to their services.
Vercel: Hosting, and optional privacy-friendly usage analytics (Vercel Analytics). Vercel's privacy policy applies to their services.
Google Analytics (GA4): On the production website only, to understand aggregate traffic. It is not loaded on staging or preview deployments.
Resend: Email delivery processor for the optional reminder emails, the newsletter, and operational alerts. Resend's privacy policy applies to their services.

We do not sell your data or share calendar event content with third parties.

Optional reminder emails

After you sign in, ShareAvailability may offer an optional, unchecked-by-default checkbox to receive a welcome note and a Sunday reminder to share your availability. Signing in alone never adds you to this list. You only join if you tick that box yourself.

If you opt in, we send at most one welcome email, then at most one email per week on Sunday around 5pm Eastern Time. We use your email address for delivery. These emails are calendar-independent: we do not read calendar event content to write or send them. Resend is the email processor.

Every reminder email includes an unsubscribe link that works in one click with no account or login, and supports your mail provider's one-click unsubscribe. You can unsubscribe from reminder emails at any time via that link. Disconnecting your calendar does not by itself unsubscribe you from reminder emails. If an address bounces or is reported as spam, we stop sending to it permanently.

The newsletter is a separate list from the optional reminder emails and from your account. Signing in to ShareAvailability never adds you to it. The only way to join is to enter your address in one of the subscribe forms on this site.

When you subscribe we store your email address, the date, the page you subscribed from, your IP address and browser, and the exact wording shown next to the form at the time. The IP and wording exist so we can show what you agreed to and when, which is what data protection law asks of us. They are not used for anything else. Resend delivers newsletter mail as well.

Every newsletter email carries an unsubscribe link that works immediately and needs no account or login, and supports your mail provider's own one-click unsubscribe. If an address bounces or is reported as spam, we stop sending to it permanently. To have your record deleted rather than simply unsubscribed, us.

Your rights

You have the following rights regarding your data:

Right to access: Request information about what data we access (though we don't store calendar event data, we can explain what we access)
Right to deletion: Disconnect your calendar at any time to revoke access and delete stored tokens. Contact us to delete your account record, preferences, and usage history
Right to revoke: Remove ShareAvailability's access through your Google Account or Microsoft account settings at any time
Right to portability: Your calendar data remains in your Google or Microsoft calendar; we don't store copies, so there's nothing to export
Right to object: You can stop using ShareAvailability at any time and disconnect your calendar
Right to withdraw consent: You can unsubscribe from optional reminder emails at any time via the link in any of those emails (disconnecting your calendar does not by itself unsubscribe you). You can withdraw consent for calendar access by disconnecting your calendar

To exercise these rights, simply disconnect your calendar in the app or revoke access in your Google or Microsoft account settings. All access will be immediately terminated.

If you are located in the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under GDPR, UK GDPR, or CCPA. to exercise these rights.

Cookies and tracking

ShareAvailability uses cookies and similar technologies for:

Session cookies: Required for maintaining your authenticated session with Google OAuth
Security cookies: Used to protect against cross-site request forgery (CSRF) attacks
Acquisition cookie (short-lived): Remembers how you arrived (referrer / UTM) across the Google sign-in redirect so we can attribute signups. It expires in about 30 minutes.
Analytics (production only): Google Analytics 4 and Vercel Analytics help us understand aggregate traffic and product health. GA4 is not loaded on staging or preview environments.

We do not use:

Advertising cookies
Third-party cookies for marketing or retargeting

Auth cookies are cleared when you log out or disconnect your calendar. Disabling cookies in your browser will prevent you from signing in to ShareAvailability.

Compliance with Google API Services User Data Policy

ShareAvailability's use of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements.

Specifically, we comply with Limited Use requirements:

User-facing features only: We only use calendar data to provide user-facing features (generating availability messages) that are prominent in the application's user interface
No transfers: We do not transfer, sell, or share Google Calendar data to third parties, except as necessary to provide the service (Google Calendar API) or as required by law. Your account email may be shared with Resend solely to deliver optional reminder emails or the newsletter you opted into
No advertising: We do not use Google Calendar data for advertising, marketing, retargeting, or other commercial purposes. Optional reminder emails use only your email address (not calendar content) and only after you opt in
No human reading: We do not allow human access to your calendar event content (titles, descriptions, attendees). Only automated, programmatic processing of start/end times occurs
Security: We implement reasonable security measures to protect user data in transit and at rest
Revocable access: You can revoke access at any time, which immediately stops all data access
Narrowest scope: We request only the minimum necessary scope (`calendar.readonly`) to provide the service

For more information about Google's data policies, visit theGoogle API Services User Data Policy.

Children's privacy

ShareAvailability is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we learn that we have collected personal information from a child under 13, we will delete that information immediately and terminate the account.

International data transfers

ShareAvailability is operated from the United States. If you are located outside the United States, please be aware that information we collect, including through Google Calendar API or Microsoft Graph, may be transferred to and processed in the United States.

By using ShareAvailability, you consent to the transfer of your information to the United States and processing in accordance with this Privacy Policy. We take appropriate safeguards to ensure your data is protected in accordance with this policy.

Data breach notification

In the unlikely event of a data breach that compromises your personal information, we will notify affected users and relevant authorities as required by applicable law. Given that we do not store calendar event data, the risk of such a breach is minimal. However, we maintain security measures and monitoring to prevent unauthorized access.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will always be available on this page with the "Last updated" date.

If we make material changes that affect how we handle your data, we will:

Notify users via email (if you have provided one) or through a prominent notice on the service
Provide at least 30 days' notice before material changes take effect
Require your consent for any material changes that expand how we use your data

Continued use of ShareAvailability after changes constitutes acceptance of the updated policy. If you do not agree with the changes, you should disconnect your calendar and stop using the service.

Contact

If you have questions about privacy, us.

ShareAvailability.com is operated by Han Global LLC.

Mailing address: Han Global LLC, 1900 N Bayshore Dr, Apt 3707, Miami, FL 33132