Privacy
Calendar Booking is operated by Meg Joong to arrange meetings. Visitors do not sign in with Google. When you use a scheduling link, the app receives your name and email, chosen time, duration, time zone, meeting format, meeting location, topic, and optional phone number or note. Saved link settings can prefill a name, email, or topic. Anyone holding a personalized link can see its offered prefills, so keep the link private. Available times show free times, not calendar event contents.
Calendar and invitations
Only Meg’s organizer Google account connects to Calendar; visitors do not connect their own Google accounts. The app checks Calendar events, attendance details, and calendar labels to find conflicts, show availability, track status, retry a booking, and categorize it. It requests limited event fields for availability, but a status or recovery check can retrieve fuller event details. When you confirm, the app creates an event and invitation in Meg’s organizer calendar; Google Meet is created when selected.
Google receives the event title and meeting details, visitor name and email, and any optional phone number or note. Calendar events also carry booking, link, and submission identifiers plus private metadata used for categorization and recovery, such as meeting format, topic and location snapshots, labels, optional client code, and time buffers. The invitation goes to the email you provide; the recipient’s email or calendar provider may keep a copy.
Storage and requests
Cloudflare D1 stores booking details, event and link identifiers, and saved link settings, including offered prefills. Operational error logs can contain event, link, or submission identifiers. Booking records do not currently expire automatically. Contact Meg to request correction or deletion; she can review the app and organizer-calendar records. Meg can revoke the app’s Google access in her Google Account. There is no promise that a recipient’s copy will be deleted.
Address suggestions
If you ask for address suggestions, the address text you type and the selected city context used to bias results are sent to Google Places by the server to find suggestions. The server API key stays private and is not sent to your browser. You can still type and submit an address when suggestions are unavailable or you choose not to use them.
Providers and access
Cloudflare hosts the app, stores D1 records, and provides admin access. Google provides Calendar, invitations, and Meet. These providers may process information under their own notices; hosting and security providers may process operational request metadata. The app has no visitor analytics or advertising trackers, does not sell booking data, and does not use Google data for ads or AI training. Topic categorization uses local rules.
Admin access uses Cloudflare Access and a secure, HttpOnly app session that can last up to 12 hours; visitors do not need an app session. OAuth credentials stay server-side in Cloudflare secrets. The app’s Google data use is limited to scheduling features, as described in Google’s API Services User Data Policy. Read the Google Privacy Policy and Cloudflare Privacy Policy.
Contact
For questions or to request a correction or deletion, contact Meg at contact@megjoong.com.