Privacy Policy

For Google Calendar sync, we request only the Google Calendar events scope (calendar.events) needed to create, update, and delete booking events for authorized salon staff.

• The Google account email used to connect the staff calendar.
• Google Calendar event data and IDs needed to sync booking events.
• OAuth access and refresh tokens, calendar IDs, and connection status stored server-side.
• Booking details written into the calendar event, such as salon name, customer name, services, date, time, phone, email, notes, and booking ID.
• We do not request Google Drive, Gmail, Contacts, or Photos access for this feature.

We use Google user data only to provide or improve the booking and calendar sync features that the staff member requested.

• Connect the staff member's Google Calendar to Nail Budapest Map.
• Create, update, and delete booking-related calendar events.
• Keep schedules accurate across the website and the connected calendar.
• Authenticate the connection and troubleshoot sync issues.
• We do not use Google user data for advertising, resale, retargeting, or AI model training.

We do not sell Google user data and we do not disclose it to unrelated third parties.

• We do not share Google user data with advertisers, data brokers, or information resellers.
• We only share data with service providers that help us host, store, or process the app, and with Google services required for the OAuth and Calendar sync flow.
• Any service provider that processes data for us may only use it to operate Nail Budapest Map.
• We do not publish Google user data to the public.

Google Calendar connection records are stored server-side and protected with access controls.

• Refresh tokens and connection metadata are stored in Firebase/Firestore on the server side, not in the browser.
• Only backend services that need the data can access it.
• Data is transmitted over HTTPS.
• We keep credentials and service configuration out of client-side code.
• We use the security controls provided by our hosting and database providers to protect the data we store.

We keep Google user data only as long as needed to run the integration or meet legal obligations.

• If a salon owner removes a staff email or the staff member disconnects Google Calendar, we delete the stored connection record and refresh token and stop future syncs.
• If you request deletion, we will remove the stored Google Calendar connection data as soon as reasonably possible.
• You can request deletion or disconnect help through the contact page or by emailing support@nailbudapestmap.com.
• If we must retain limited data for legal, security, or fraud-prevention reasons, we keep only the minimum needed and only for as long as required.