Privacy policy

Winstyboy helps a group find a meeting time and book it. This page says what we collect, why, and how long we keep it.

Organizers

• Your name, email, and profile picture from Google or Microsoft sign-in.
• Your time zone and plan.
• Calendar access tokens, encrypted at rest. We use them to read your free/busy times for an event's dates, and, when you book, to create, move, or delete that one calendar event with its attendees.
• If you connect Zoom: tokens to create, update, and delete the meetings you book.
• The names and emails of people you invite or who respond to your events, saved so you can invite them again. You can remove anyone from your suggestions, and they're deleted with your account.
• Billing is handled by Stripe. We store your Stripe customer ID and plan status, never card details.

Participants

• The name and email you enter, and the times you mark. Email is used only to send the invite and updates.
• If you choose "Pull from my calendar", we ask for read-only free/busy access, read your busy times for the event's dates once, and discard the access token immediately. Nothing from your calendar is stored except the times you then save.

Google user data

Winstyboy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't sell calendar data, use it for ads, or let people read it except to provide the features above.

How long we keep it

• Responses and participant details are deleted 30 days after a booked meeting ends.
• For unbooked events: 30 days after the last date, or 90 days after creation for days-of-the-week events.
• The event title and time stay in the organizer's history until they delete the event or account.
• Deleting your account removes all of your events and responses, disconnects your calendar and Zoom, and ends your subscription.

Who processes data for us

Vercel (hosting), Neon (database), Google and Microsoft (sign-in and calendars), Zoom (meetings), Stripe (payments), and Resend (email). Each only receives what it needs for its part.

Cookies

We use cookies to keep you signed in, to remember your time zone, and to secure sign-in flows. No advertising or analytics cookies.

Contact

Questions or deletion requests: hello@winstyboy.com.