Privacy Policy
Draft for legal review. This policy is a placeholder and has not been reviewed by a lawyer. It will be replaced before eBookMe is generally available.
Who we are
eBookMe provides online scheduling to organisations. For bookings made with a company's people, that company is the controller and eBookMe processes the data on its behalf.
What we collect
- Account data: names, work emails and roles of the people a company adds; sign-in events; time zone, Webex room link and dial-in details they enter.
- Calendar access: for the calendar accounts people connect, eBookMe reads the start and end times of events (not their titles or details) to find free time, and creates, changes and cancels the meetings booked through it. Access tokens are encrypted with a key held for each company.
- Bookings: the name, email, time zone, guests and notes a client enters when booking, the meeting time and join details, and a history of changes.
- Billing: Stripe handles payment details; we receive the plan, seat count and subscription status, never card numbers.
How we use it
To show availability, book, change and cancel meetings, send confirmations and reminders, bill subscriptions, prevent abuse and support customers. We don't sell personal data, use calendar data for advertising, or use it to train models. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Where it's stored
On Amazon Web Services in the United States. Sub-processors: Amazon Web Services (hosting, email), Stripe (billing), Cloudflare (sign-up bot check), Microsoft and Google (the calendars people connect).
Retention
Bookings are kept while the company's account is active. Disconnecting a calendar deletes its tokens. When a company closes its account, its data is deleted within 90 days.
Your rights
Clients who booked a meeting can contact the company they booked with. Account holders can contact their company admin or us. You can disconnect a calendar at any time from the Calendars page, or revoke access in your Microsoft or Google account.