Privacy Policy

Sajilo Schedule Last updated: October 29, 2026

This Privacy Policy explains how Sajilo Schedule ("we", "our", or "us") collects, uses, and protects personal information when you use our scheduling and reservation platform at www.sajiloschedule.com (the "Service").

This policy applies to two groups of people:

Owners — people who create an account and publish a booking calendar.
Guests — people who book, view, reschedule, or cancel a reservation on an owner's calendar. Guests do not need an account.

1. Information We Collect

1.1 Owner Account Information

When you create an account, we collect:

Username, service name, and email address
Phone number and social media links, if you add them
A profile photo and a brand logo, if you upload them
Password, if you sign up with email and password (stored only as a one-way hash, never in plain text)
If you sign in with Google: your Google account identifier, name, and email address, received from Google
Whether your email address has been verified

1.2 Calendar Settings

When you set up your booking calendar, we store:

Calendar name, public URL identifier (slug), description, location, and meeting type (for example in person, phone call, Google Meet, or custom)
Availability settings such as time slots, bookable days, date-specific availability, slot capacity, and how many weeks ahead bookings are allowed
Whether a booking page is listed publicly or open only from its secret link, and that link's random token
How many bookings your account has received each month, so we can apply your monthly booking limit (see our Terms of Service)

1.3 Google Calendar Connection (optional)

If you choose to connect Google Calendar to offer Google Meet meetings, we request permission to create and manage calendar events on your behalf. We store:

A Google refresh token that lets the Service create, update, and delete events for your bookings
The email address of the connected Google Calendar
For each booking, the ID of the Google Calendar event and the Google Meet link

We only use this access to manage events for bookings made through the Service. We do not read, analyse, or store your other calendar events.

1.4 Reservation Information

When a guest books a time slot, we collect:

Name and email address
Phone number (optional)
Any additional information the guest chooses to provide
The selected date and time
A reservation key that lets the guest manage the booking without an account
The booking's status (booked, confirmed from the reminder email, or cancelled) and when its reminder email was sent

1.5 Technical Data

Like most web services, our servers process technical data needed to deliver the Service, such as IP address, browser type, request timestamps, and error logs. We use this data to operate, secure, and troubleshoot the Service. To prevent abuse, such as repeated sign-in attempts or guessing email verification codes, we briefly keep IP addresses and email addresses in counters that expire on their own within 15 minutes. We also use Vercel Web Analytics to count page visits (see Section 8). We do not use advertising trackers.

2. How We Use Information

We use the information we collect to:

Provide accounts — authenticate owners and keep them signed in
Operate booking calendars — show an owner's public calendar and accept, reschedule, and cancel reservations
Create meeting links — create Google Calendar events and Google Meet links for owners who connected Google Calendar
Send service emails — email verification, password reset, booking confirmations (with a calendar file attachment), reschedule and cancellation notices, owner notifications, and booking reminders
Keep the Service secure and working — prevent abuse, fix bugs, and diagnose errors
Meet legal obligations — when required by applicable law

We do not sell personal data, and we do not use it for advertising.

We share personal data only with service providers that help us run the Service, and only as needed for that purpose:

Resend — sends our transactional emails
Google — handles Google sign-in and, for owners who connected Google Calendar, creates calendar events and Google Meet links. Guests' names and email addresses are added to these events.
Railway — hosts the application and its background job systems
Supabase — hosts our database
Amazon Web Services (S3, Mumbai region) — stores uploaded profile photos and brand logos
Vercel — hosts the website and provides privacy-friendly page-visit analytics

When a guest books a reservation, their details are shared with the owner of that calendar, who can see them in their dashboard.

Access by Sajilo Schedule staff

A small number of Sajilo Schedule administrators can view owner accounts, booking pages, and reservations, including guests' names, email addresses, and phone numbers. They use this access only to provide support, investigate abuse or breaches of our Terms of Service, and keep the Service running, for example to suspend an account or change its monthly booking limit. Every change an administrator makes is recorded in an audit log.

We may also disclose information if required by law or court order, or to protect the rights and safety of our users or the Service.

4. Public Calendar Pages

When you publish a calendar, your booking pages at /{your-slug} and /{your-slug}/{calendar-name} are publicly accessible, and they can be embedded on other websites. These pages show your service name, profile photo or brand logo, social media links, calendar name, description, location, meeting type, and available time slots. They do not show other guests' personal details.

If you make a booking page secret, it is left off /{your-slug} and our site-wide list, and it opens only from its own link, which contains a random token. A secret link is hidden, not protected: anyone you send it to, or who it is forwarded to, can open and book the page. You can get a new secret link at any time so that the old one stops working.

Owners act as the data controller for their guests' reservation data, and we process that data on their behalf. Owners are responsible for telling their guests how their data is used.

5. Data Retention

Account and calendar data is kept while your account is active.
Reservations, including cancelled ones, are automatically deleted one month after the booked date and time. Until then, the owner can see them in their dashboard. Guests can cancel a reservation before its booked time using their reservation key.
Profile photos and brand logos are deleted from storage when you remove or replace them, or when you delete your account.
Monthly booking counts are kept while your account is active.
Administrator audit log entries are kept as long as needed to keep the Service secure and accountable.
Account deletion: when you delete your account from the dashboard, your account, calendar settings, uploaded images, Google Calendar connection, and all reservations on your calendar are deleted immediately. Copies in backups may remain for a limited period until they are overwritten.
Google Calendar events that were created in an owner's own Google Calendar are stored by Google and are subject to Google's policies.

6. Data Security

We use appropriate technical and organisational measures to protect personal data, including:

One-way hashing of passwords
HTTPS/TLS encryption for data in transit
An HTTP-only session cookie for signed-in owners
Email verification for new password-based accounts
Restricting database access to the application's own services
Limiting repeated sign-in and verification attempts
Limiting administrator access to a small number of staff, with an audit log of their changes

No system is completely secure. Please use a strong, unique password and keep your reservation key private, because anyone who has it and your email address can manage your booking. Owners should share secret booking links only with the people who should book.

7. Your Rights

Depending on where you live (for example, in the European Economic Area or the United Kingdom under the GDPR), you may have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Delete your data
Restrict or object to certain processing
Receive your data in a portable format
Withdraw consent at any time where processing is based on consent
Complain to your local data protection authority

Owners can delete their account directly from the dashboard. Guests can cancel and delete a reservation using their reservation key. For other requests, contact us at bookingnest00@gmail.com. If you are a guest, you may also contact the owner of the calendar you booked with, since they control your reservation data.

We will respond to requests within 30 days.

8. Cookies and Local Storage

Sajilo Schedule uses only what is strictly needed for the Service to work:

access-token cookie — an HTTP-only cookie that keeps owners signed in. It lasts for the browser session, or longer if you choose "remember me".
Cookie preference — your choice from the cookie notice is saved in your browser's local storage so we do not ask again.

We use Vercel Web Analytics to understand which pages are visited. It does not set cookies, does not track you across sites, and records only the page path (without query parameters), referrer, country, and device type. Visitors are counted using a hash that resets every day and cannot identify you.

We do not use advertising cookies, analytics cookies, or third-party tracking pixels. If you block cookies, you will not be able to sign in.

9. Google API Services

Sajilo Schedule's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

10. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. If the changes are significant, we will notify owners by email or with a notice in the Service.

12. Contact

For questions about this Privacy Policy or your personal data:

Sajilo Schedule Email: bookingnest00@gmail.com