We take security seriously and implement multiple measures to protect your data.
Security measures
Data transmission:
All connections use HTTPS encryption
Data encrypted in transit
Secure WebSocket connections for real-time features
Data storage:
Data stored in secure, encrypted databases
Regular security audits
Access controls and monitoring
Authentication:
Secure password hashing
Session tokens with expiration
Automatic logout after inactivity
Calendar integration security:
Read access only - We can see your calendar but can't modify existing events
Write for new events only - We only create new booking events
OAuth authentication - Industry-standard secure connection
Revocable - Disconnect anytime from your Google/Microsoft account settings
Payment security:
Payments processed by Stripe
We never see or store your full card number
PCI DSS compliant payment processing
Data privacy:
We don't sell your data
Data used only to provide the service
You can delete your data at any time
Compliant with UK GDPR
Your responsibilities
Keep your password secure
Don't share your login credentials
Log out on shared devices
Report any suspicious activity