How Ongati uses Google user data

What Ongati accesses

Ongati asks for Google access only when a business owner or team member chooses Connect Google Calendar. With your permission, Ongati accesses:

• Your Google account's email address and basic profile, to show which Google account is connected.
• Your list of calendars (calendar.calendarlist.readonly): each calendar's name, ID and time zone, whether it's your primary calendar, and your access level. You use this list to choose which calendar Ongati works with.
• Events on the calendar you choose (calendar.events):
  • Your existing events: Ongati reads only their start and end times, status, recurrence, and whether the time shows as busy. It doesn't read event titles, descriptions, locations or guests.
  • Appointments booked in Ongati: Ongati creates, updates and deletes the matching event on that calendar, with the appointment's details, such as the service, time and client name. It adds an online meeting link when the appointment is online.

How Ongati uses it

• Your booking page: it shows your busy times as unavailable, so clients can't book over them.
• Your Google Calendar: it stays up to date with the appointments booked, changed or cancelled in Ongati.

Ongati uses Google user data only to provide these calendar features to you. It doesn't use Google user data for advertising. It doesn't sell it. It doesn't use it to train artificial intelligence or machine learning models.

How Ongati stores and protects it

What Ongati stores:

• encrypted access tokens;
• the connected account's email address;
• the calendars you chose;
• your busy time ranges;
• the IDs of events Ongati created;
• short sync and security records.

Where and how: it's stored on Ongati's servers in the United States, protected by encryption in transit and at rest, and only authorized Ongati staff can access it.

Who reads it: people at Ongati don't read your calendar data, except:

• with your permission to help you;
• to investigate security issues or abuse;
• when the law requires it.

Who Ongati shares it with

Ongati doesn't share, transfer or disclose Google user data to anyone, except:

• Google, when Ongati writes your appointments to your Google Calendar at your request.
• Amazon Web Services, which hosts Ongati's servers and stores data for Ongati under contract. It may not use the data for any other purpose.
• Your own business account: owners and admins who manage the calendar see your busy times as unavailable time. Clients see only that a time isn't available.
• When the law requires it, or to protect the rights, property or safety of Ongati, its users or the public.
• A merger, acquisition or sale of Ongati's assets: these same commitments continue to apply, and you're told first.

Keeping and deleting it

When you disconnect (Calendar, then Sync, then Disconnect), Ongati:

• revokes its access with Google;
• deletes its stored access tokens, your calendar list and the busy times it stored.

It keeps only limited records of the connection and syncs, with no event content, for security and legal reasons. You can also remove Ongati's access at any time at https://myaccount.google.com/permissions. Deleting your Ongati account disconnects every calendar the same way.

Limited Use

Ongati's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

Questions about this page: privacy@ongati.com