Privacy Policy

Push Record Scheduling lets people book meetings with the Push Record team. Hosts connect their Google Calendar so the app can work out when they are free; guests pick a time without creating an account.

It is operated by Push Record LLC. Questions, requests, or complaints: mark@pushrecord.com.

Two things, and nothing else:

• Free/busy times. We ask Google for the start and end times of blocks on your calendar, using the calendar.freebusy permission. That permission cannot return event titles, descriptions, guests, or locations — so we never receive them.
• Bookings we create. When someone books you, we add that one event to your calendar with a Google Meet link, and delete it if the booking is cancelled. This uses the calendar.events permission, which Google requires for writing to a calendar — there is no write-only alternative.

Free/busy times are used to compute open slots at the moment a booking page is loaded. They are not written to our database.

For hosts (people with a booking page):

• Your Google account email, name, and profile picture.
• Your Google refresh token, encrypted at rest (AES-256-GCM), so the app can keep checking your availability without asking you to sign in repeatedly.
• Settings you enter: your link name, timezone, weekly hours, meeting types, buffers, and booking notice.

For guests (people booking a meeting):

• The name, email address, and any notes typed into the booking form.
• The meeting time, and the identifier of the calendar event we created for it.

We do not use tracking cookies, analytics, or advertising. The only cookie set is the session cookie that keeps a host signed in.

• Google — calendar access and sign-in. Google sends the calendar invitation to the guest on our behalf.
• Railway — hosting and the database.
• The host you booked — sees your name, email, and notes, as they would with any calendar invitation.

We do not sell personal information, and we do not share it with anyone else unless we are legally required to.

Bookings and their guest details remain until deleted. Host accounts and their encrypted tokens remain until the account is removed. Ask us and we will delete either.

• Disconnect at any time at myaccount.google.com/permissions. That immediately revokes our access to your calendar.
• Ask for deletion by emailing mark@pushrecord.com. We will remove your account, stored tokens, and bookings.

Push Record Scheduling's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to train generalised AI or machine learning models, and we do not transfer it to others except as described above.

If this policy changes in a way that affects what we collect or who sees it, we will update the date at the top of this page.