AppointAssists Privacy Policy

Last Updated & Effective Date: September 8, 2026 · GDPR, CCPA & Google API Policy Compliant

1. Introduction & Scope

AppointAssists (“we”, “our”, or “us”) is committed to protecting the privacy and security of your personal data. This Privacy Policy details how we collect, store, process, and protect your information when you use our multi-tenant scheduling software, customer relationship management (CRM) console, and calendar integration services at https://www.appointassists.com.

2. Information We Collect

Account Information: Name, business email address, encrypted authentication credentials, phone number, organization name, role, and timezone.
Client & Appointment Data: Client contact details, session titles, duration, scheduled dates, notes, and meeting locations.
Google User Data: When you connect your Google Account, we access your Google Calendar metadata (event IDs, event titles, start/end timestamps, attendee email addresses) and Google Profile information (email, name) via OAuth 2.0 tokens.

3. Google API Services User Data Policy & Limited Use Disclosure

AppointAssists's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How We Use Google User Data: We access your Google Calendar strictly to read existing calendar commitments to prevent scheduling collisions, insert new scheduled appointment bookings, update event times during reschedules, and automatically generate Google Meet video conference links.

Data Sharing & Transfer Restrictions: We do NOT sell, rent, or transfer your Google user data to any third parties or data brokers. Google user data is NEVER used for serving advertisements, retargeting campaigns, or credit scoring.

AI / ML Model Training: We do NOT use Google user data to train, retrain, or improve generalized machine learning or artificial intelligence models.

Human Access: No humans read your Google Calendar event data unless you have provided explicit affirmative consent for a specific technical support issue or where required by law.

4. How We Protect Your Data

We implement industry-standard administrative, physical, and technical safeguards to protect your personal and operational data:

All network communications are encrypted in transit using TLS 1.3.
All OAuth refresh tokens and database storage are protected with AES-256 encryption at rest.
Strict multi-tenant cryptographic isolation ensures that no organization can access another organization's scheduling data.

5. Data Retention & Revocation of Access

We retain your account and calendar data only for as long as your workspace remains active. You can disconnect your Google Calendar integration at any time from your Dashboard > Integrations panel.

You can also revoke AppointAssists's access directly via your Google Account Security Permissions. Upon disconnection or account deletion, all cached tokens and sync data are immediately and permanently purged from our databases.

6. Your Rights (GDPR & CCPA)

Under global privacy frameworks including GDPR and CCPA, you have the right to request access to your personal information, request data portability/export, or request permanent deletion (“Right to be Forgotten”) of your records.

7. Contact & Privacy Officer

If you have questions regarding this Privacy Policy, Google API User Data compliance, or data subject requests, please contact our Data Protection Office:

AppointAssists Data Protection Team

Email: qualtriq@gmail.com

Website: https://www.appointassists.com