Privacy Policy
Last updated: August 14, 2026
Timefix (“we”, “us”) is a scheduling service: you share a link like timefix.ai/yourname, and visitors book time with you - by picking a slot or by telling the page when works for them. This policy explains what we collect on timefix.ai and app.timefix.ai, why, and the choices you have. It applies to hosts (people with a Timefix account) and guests (people who book time with a host).
What we collect
If you sign up as a host, we collect:
- Your Google account basics - name, email address and profile photo, provided by Google when you sign in.
- Google Calendar data - with your permission, when your calendar is busy (so we never offer a taken slot), and the events Timefix creates on your calendar for confirmed bookings.
- Your settings - handle, availability rules, timezone, event types, and the bookings made with you.
If you book time with a host as a guest, we collect:
- Booking details - your name, email address, the time you chose, your timezone, party size where relevant, and any note you add.
- Conversation transcripts - what you type to the booking assistant on a host’s page, kept so the host has context for the meeting and so we can improve the assistant. The assistant runs entirely on our servers; your messages are not sent to any third-party AI service.
We also use privacy-respecting, aggregate analytics (page performance and visit counts). We do not use advertising trackers, and we do not sell personal information to anyone.
How we use Google user data
Timefix requests Google’s calendar.readonly and calendar.events scopes, and uses them for exactly two things:
- Reading availability - we check your calendar’s free/busy status to compute which slots to offer. Free/busy results are cached for at most 60 seconds; we do not store the contents of your existing events.
- Creating bookings - when a guest books, we create the event on your calendar and invite the guest, so both sides get a normal calendar invitation.
Timefix’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not let humans read it except with your consent or for security and abuse investigation, and do not use it to develop, improve or train generalized AI or machine-learning models.
Where your data lives
Timefix runs on a small set of infrastructure providers, each used only to operate the service: Vercel (hosting and delivery), Neon (our Postgres database, hosted on AWS in the United States), Upstash (a short-lived cache), Resend (sending booking confirmation emails), and Google (calendar operations described above). Data is encrypted in transit and at rest, and calendar tokens are stored server-side only - they never reach a browser.
Cookies
The only cookie Timefix sets is the session cookie that keeps hosts signed in, scoped to app.timefix.ai. Public booking pages and the marketing site set no cookies at all.
Retention and deletion
- Hosts can disconnect Google Calendar at any time from the Connections page - this revokes Timefix’s access with Google and deletes our stored tokens immediately.
- Bookings, contacts and transcripts are kept while the host’s account is active, so their history keeps working.
- To delete your account and its data entirely - or, as a guest, to ask what a booking stored about you and have it removed - email us and we will complete the request within 30 days.
Your rights
You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Depending on where you live, local law may give you further rights; we honor requests regardless of where you are.
Children
Timefix is not directed at children under 16, and we do not knowingly collect their personal information.
Changes
If this policy changes materially, we will update this page and its date, and notify hosts by email for significant changes.
Contact
Questions or requests: privacy@timefix.ai.