Permissions requested
Dollflow requests the narrow Google Calendar scopes calendar.freebusy and calendar.events. Connection is optional and initiated by the merchant for a specialist or business calendar.
Information accessed
Dollflow processes the connected Google account email, selected calendar identifiers, OAuth access and refresh tokens, token expiry, granted scopes, busy-time responses, and event identifiers.
An appointment event may contain the service, customer name, contact details, booking message, start time, and end time so the merchant can manage the appointment.
How Google data is used
- Check busy periods before showing availability.
- Create an event when an appointment is confirmed.
- Update it when the appointment is rescheduled.
- Delete or cancel it when the appointment is cancelled.
- Maintain and secure the merchant-requested connection.
Google data is not used for advertising, credit decisions, surveillance, or sale.
Storage, security, and sharing
OAuth tokens are encrypted at rest and transmitted over encrypted connections. Access is limited to service components and authorized support or security personnel who need it. Google data is shared only with infrastructure providers needed to run Dollflow, when the merchant instructs us, or when legally required.
Busy responses calculate availability. Account and event references are retained only while needed for synchronization and follow our Retention Policy.
Disconnect and delete
A merchant can disconnect Google Calendar in Dollflow or revoke Dollflow in Google Account permissions. Disconnecting stops future access and removes stored connection credentials; existing events may need to be managed in Google Calendar.
Shop deletion and verified privacy requests remove related connection data. Contact dollflowapp@gmail.com.
Google Limited Use compliance
Dollflow's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Human access is prohibited except when a user authorizes support access, access is necessary for security or legal compliance, or information is aggregated and no longer personal.