Privacy Policy

What This App Does

Slot Machine is a personal scheduling tool. The sender generates a customized availability link and shares it with a recipient. The recipient opens the link, picks a time, and a Google Calendar invite is created automatically for both parties.

Information We Collect

We collect only what's necessary to make a booking work:

• Recipient name and email address — entered by the recipient when booking a time. Used to create the calendar invite and send a confirmation email.
• Recipient phone number — collected only for Phone or WhatsApp meeting types, where it is used to populate the calendar invite location field.
• Google Calendar data — accessed via Google OAuth on behalf of the sender. We read free/busy status to determine available slots, and write a calendar event when a booking is confirmed. Calendar event content is not stored beyond what is needed to check availability.
• Venue preference and selected time slot — stored as part of the booking record.

How We Use Your Information

• To display available time slots to the recipient
• To create a Google Calendar event when a booking is confirmed
• To send calendar invite emails to both sender and recipient via Google Calendar

We do not sell, rent, or share your personal information with third parties for any purpose other than the services described above.

Data Storage

Booking details — including recipient name, email, selected time, and venue — are stored in a secure database hosted on Railway. This data is used to generate calendar invites and is retained to support delivery. We do not store your Google Calendar event content beyond free/busy availability.

How We Protect Your Data

• Google Calendar access is strictly scoped — Calendar data is accessed read-only for availability checking and write-only for creating booking events. We do not store, copy, or analyze calendar event content beyond what is necessary to compute availability and create the booked event.
• OAuth tokens are stored securely — Google OAuth tokens are stored in an encrypted database. They are never shared with third parties and are used solely to access Google Calendar on your behalf.
• All data transmission is encrypted — Communication between your browser, our server, and Google is encrypted via HTTPS/TLS.
• Tokens are managed automatically — OAuth tokens are refreshed automatically as needed and revoked upon account disconnection.
• You control access — We retain calendar access only while you maintain an active account. You can revoke access at any time via your Google Account settings at myaccount.google.com/permissions.

Google API Scopes Used

Slot Machine requests the following Google OAuth scope on behalf of the sender:

• https://www.googleapis.com/auth/calendar — to read free/busy availability and create booking events on the sender's Google Calendar.

This scope is used solely to power scheduling functionality. No calendar data is used for advertising or shared with third parties.

Google API Limited Use Policy

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Third-Party Services

• Google Calendar API — availability checking and event creation
• Places API (New) — venue autocomplete for recipient-choice meeting types
• Railway — application hosting and database
• Anthropic Claude API — natural language time filtering feature

Artificial Intelligence Features

Slot Machine uses Anthropic's Claude API to power a natural language time filtering feature. This feature allows guests to describe their availability preferences in plain English (e.g., "nothing before 10am") when selecting a meeting time.

• What is sent to Anthropic — Only the guest's text input is sent to Anthropic for processing. No calendar data, no personal information (name, email, or phone number), and no booking details are transmitted.
• Anthropic's privacy policy — Anthropic's handling of this data is governed by their privacy policy at anthropic.com/privacy.
• This feature is optional — The natural language filter does not affect booking functionality if not used. Guests can always select time slots directly without it.

Data Retention

Booking records are retained to support delivery confirmation and booking history. You may request deletion of your booking data at any time by contacting us at the address below. We retain booking data for up to 2 years unless an earlier deletion is requested.

Contact

Questions or requests about this privacy policy:
bill@fullgroanproductions.com