Privacy Policy

Overview

ShareAvailability.com ("ShareAvailability", "we", "our", "us") is operated by Han Global LLC. ShareAvailability helps you generate a plain-text availability message from your calendar. We take privacy seriously and only access what's required to provide this functionality.

What data we access

When you connect Google Calendar, ShareAvailability requests read-only access to:

• Calendar event times: Start time and end time of events (to determine when you're busy). We do not access event titles, descriptions, attendees, locations, or any other event content.
• Calendar list metadata: Calendar names and IDs (to let you choose which calendars to include)
• All-day event indicators: Whether an event is all-day (to properly calculate availability)

We explicitly do not access:

• Event titles or summaries
• Event descriptions
• Attendee information
• Event locations
• Event notes or attachments
• Any other event content beyond start/end times

We cannot:

• Create events
• Edit events
• Delete events
• Send invitations
• Modify any calendar data

How your data is used

Your calendar data is used exclusively to:

• Calculate available time windows by identifying when you have no scheduled events
• Generate a plain-text availability message that you can copy and share
• Display which calendars you have available for selection

All processing is automated and programmatic. We only extract start and end times from events to calculate availability windows. No human reviews or reads your calendar event content (titles, descriptions, attendees, etc.).

We do not:

• Store your calendar events or event data long-term
• Sell, rent, or monetize your data
• Share your data with third parties
• Use your data for advertising or marketing
• Use your data to train AI models or for machine learning
• Analyze your data for any purpose other than generating availability
• Allow human access to your calendar event content

Authentication & security

We implement security measures to protect your data:

• Google authentication is handled via OAuth 2.0, a secure industry-standard protocol
• All data transmission is encrypted using HTTPS/TLS
• Access tokens are stored securely in encrypted HTTP-only cookies and used only to fetch calendar data
• We use read-only access, preventing any modification of your calendar
• You can disconnect ShareAvailability at any time, which immediately revokes all access

While we implement reasonable security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your privacy.

Data retention and deletion

ShareAvailability does not permanently store your calendar events or event data. Here's how we handle data:

• Email address: Your Gmail address is stored securely in our database for account identification and authentication purposes only. This is necessary to maintain your account and session.
• Calendar events: Fetched on-demand when you request availability, processed immediately, and discarded after generating the availability text. No event data is stored on our servers.
• Availability text: Generated in your browser and only stored locally in your browser's memory until you copy it or refresh the page.
• Access tokens: Stored securely in encrypted HTTP-only cookies for session management. Automatically deleted when you disconnect your calendar or log out.
• User preferences: Stored locally in your browser (e.g., date ranges, time preferences) and not transmitted to our servers.

When you disconnect your calendar, all access tokens are immediately revoked and deleted. You can also revoke access at any time through your Google Account settings, which immediately stops all data access.

Third-party services

ShareAvailability uses the following third-party services:

• Google Calendar API: To access your calendar data. Google's privacy policy applies to their services.
• Google OAuth 2.0: For secure authentication. Your credentials are handled by Google, not stored by ShareAvailability.
• Supabase: For secure database storage of user account information (email addresses only). Supabase's privacy policy applies to their services.

We do not share your data with any other third parties.

Your rights

You have the following rights regarding your data:

• Right to access: Request information about what data we access (though we don't store calendar event data, we can explain what we access)
• Right to deletion: Disconnect your calendar at any time, which immediately revokes all access and deletes all stored tokens
• Right to revoke: Remove ShareAvailability's access through your Google Account settings at any time
• Right to portability: Your calendar data remains in your Google Calendar; we don't store copies, so there's nothing to export
• Right to object: You can stop using ShareAvailability at any time and disconnect your calendar
• Right to withdraw consent: You can withdraw your consent for data processing by disconnecting your calendar

To exercise these rights, simply disconnect your calendar in the app or revoke access in your Google Account settings. All access will be immediately terminated.

If you are located in the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under GDPR, UK GDPR, or CCPA. Contact us at rohanhirani@gmail.com to exercise these rights.

Cookies and tracking

ShareAvailability uses minimal cookies required for authentication and session management:

• Session cookies: Required for maintaining your authenticated session with Google OAuth
• Security cookies: Used to protect against cross-site request forgery (CSRF) attacks

We do not use:

• Advertising cookies
• Tracking cookies
• Analytics cookies that track your behavior
• Third-party cookies for marketing purposes

Cookies are automatically deleted when you log out or disconnect your calendar. You can disable cookies in your browser settings, but this will prevent you from using ShareAvailability.

Compliance with Google API Services User Data Policy

ShareAvailability's use of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements.

Specifically, we comply with Limited Use requirements:

• User-facing features only: We only use calendar data to provide user-facing features (generating availability messages) that are prominent in the application's user interface
• No transfers: We do not transfer, sell, or share user data to third parties, except as necessary to provide the service (Google Calendar API) or as required by law
• No advertising: We do not use data for advertising, marketing, retargeting, or other commercial purposes
• No human reading: We do not allow human access to your calendar event content (titles, descriptions, attendees). Only automated, programmatic processing of start/end times occurs
• Security: We implement reasonable security measures to protect user data in transit and at rest
• Revocable access: You can revoke access at any time, which immediately stops all data access
• Narrowest scope: We request only the minimum necessary scope (`calendar.readonly`) to provide the service

For more information about Google's data policies, visit theGoogle API Services User Data Policy.

Children's privacy

ShareAvailability is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we learn that we have collected personal information from a child under 13, we will delete that information immediately and terminate the account.

International data transfers

ShareAvailability is operated from the United States. If you are located outside the United States, please be aware that information we collect, including through Google Calendar API, may be transferred to and processed in the United States.

By using ShareAvailability, you consent to the transfer of your information to the United States and processing in accordance with this Privacy Policy. We take appropriate safeguards to ensure your data is protected in accordance with this policy.

Data breach notification

In the unlikely event of a data breach that compromises your personal information, we will notify affected users and relevant authorities as required by applicable law. Given that we do not store calendar event data, the risk of such a breach is minimal. However, we maintain security measures and monitoring to prevent unauthorized access.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will always be available on this page with the "Last updated" date.

If we make material changes that affect how we handle your data, we will:

• Notify users via email (if you have provided one) or through a prominent notice on the service
• Provide at least 30 days' notice before material changes take effect
• Require your consent for any material changes that expand how we use your data

Continued use of ShareAvailability after changes constitutes acceptance of the updated policy. If you do not agree with the changes, you should disconnect your calendar and stop using the service.

Contact

If you have questions about privacy, contact: rohanhirani@gmail.com

ShareAvailability.com is operated by Han Global LLC.