Privacy Policy

Last updated: October 12, 2026

This page explains how AI Book and Meet, an appointment scheduling app operated by WinLocal.biz, handles Google user data. Questions: digitalagent@winlocal.biz.

Google user data — AI Book and Meet

A business that uses AI Book and Meet, or each person on its team, can connect a Google account so that appointments booked through the app are added to their Google Calendar, with a Google Meet link for video appointments. This section explains what Google user data the app accesses and what it does with it.

What Google user data we access

When a business or a team member connects a Google account, AI Book and Meet requests only two permissions:

• See, create, change and delete events on the calendars you own (calendar.events.owned). We use it to create, update and delete the events for appointments booked through AI Book and Meet. If the business turns on availability sync for a team member, we also read the start time, end time and busy/free status of the events on that person’s primary calendar, so those times are not offered for booking. We never read or store event titles, descriptions, locations or guests.
• Your email address (userinfo.email). We use it to show which Google account is connected.

From Google we receive and keep:

• The email address of the connected Google account.
• An access token and a refresh token that let the app act on your behalf.
• For each appointment, the ID of the calendar event we created and, for video appointments, its Google Meet link.
• If availability sync is on: for each busy event in the next 180 days, its ID, start and end time, and whether it lasts all day. Nothing else about the event.

How we use it

We use Google user data only to provide the feature the business turned on:

• Create a calendar event when an appointment is booked, with a Google Meet link for video appointments.
• Update that event when the appointment is rescheduled.
• Delete that event when the appointment is cancelled.
• Include the Meet link in the appointment confirmation and reminder sent to the business’s customer.
• If availability sync is on, mark the times when the connected person is busy, so those times are not offered for booking online, by phone or by chat.

The event we create contains the service name, date and time, the confirmation code and, for in-person appointments, the location. On a team member’s own calendar it also shows the customer’s name and phone number. For video appointments, the customer is added as a guest if they gave an email address.

We do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve or train artificial intelligence or machine learning models.

Limited Use

AI Book and Meet’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Our AI receptionist and chat assistant only receive the list of open appointment times calculated by AI Book and Meet. They never receive calendar events or any other data obtained from Google APIs.

Who we share it with

We do not sell, rent or trade Google user data. We share it only in these cases:

• Service providers that run the app for us, under contracts that require them to protect the data: our hosting provider, our database provider and our email delivery provider (to send confirmations that include the Meet link).
• The customer who booked, who receives the Meet link and, if they gave an email address, the calendar invitation.
• When required by law, or to protect the rights, safety or security of our users or others.

How we protect it

• Access and refresh tokens are encrypted at rest with AES-256-GCM. The encryption key is kept separately from the database.
• All data travels over encrypted connections (HTTPS/TLS).
• Only the app’s servers can decrypt the tokens. Access to production systems is limited to authorized WinLocal.biz staff.

How long we keep it and how to delete it

• Disconnecting: a business can disconnect its Google account, or a team member’s, at any time from the app. When it does, we ask Google to revoke our access and delete the stored tokens and busy times from our database right away.
• Busy times are refreshed every 15 minutes. Past busy times are deleted at the next refresh.
• Revoking from Google: you can also remove AI Book and Meet’s access at myaccount.google.com/permissions.
• Event IDs and Meet links stay with the appointment records while the business keeps using AI Book and Meet, because the business needs them to manage its appointments. When a business cancels its subscription or asks us to delete its data, we delete this information within 30 days, except where the law requires us to keep it longer.
• To request deletion, email digitalagent@winlocal.biz.

Deleting data from AI Book and Meet does not delete events already in your Google Calendar. You can delete those from Google Calendar yourself.

Contact

Questions about this policy: digitalagent@winlocal.biz · WinLocal.biz, 1345 Avenue of the Americas, 2nd Floor, New York, NY 10105.