Calendar data privacy

What access is requested?

Google and Microsoft sign-in lets you authorize calendar access without giving The Tickle Bar your account password. We request calendar discovery, event access and continuing access so we can check busy times and maintain our own appointment events. Provider permissions may cover more calendars or event fields than the calendars you select; the app limits scheduling operations to your selections.

How calendar data is used

You select calendars for conflict checking and one writable calendar for Tickle Bar appointments. Busy times are used to prevent new booking handoffs during conflicts. With your explicit permission, we create and delete a clearly labeled temporary event to verify write access. We then maintain app-owned events for Tickle Bar bookings. Moving or deleting a mirrored event does not change the customer's actual booking.

What is stored and shared?

We store selected calendar identifiers, connection and sync status, busy intervals, and identifiers needed for app-owned events and notification subscriptions. Connection credentials and notification subscription details are encrypted server-side. Private outside-event titles, descriptions and attendees are not retained in our scheduling database or shown to clients.

Our servers process calendar responses to calculate availability. Internal Acuity resources receive scheduling blocks for unavailable times, not private outside-event details. Clients see available appointment times. Calendar data is not used for advertising, sold, or sent to AI services for model training.

Google data use

The Tickle Bar's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Calendar access is used to provide the scheduling features described here.

Disconnecting and deleting data

In Manage your availability, first save manual scheduling and acknowledge that outside conflicts will no longer be checked. Then select Disconnect calendar. Successful cleanup removes app-owned mirrored events and notification subscriptions, clears stored connection credentials, selected calendars and cached busy intervals, and revokes the app's Google authorization. Microsoft authorization can also be removed in your Microsoft account settings; we do not revoke access to unrelated applications.

If provider access fails or cleanup cannot be confirmed, disconnect may remain pending for support review rather than silently abandoning an event. Disconnecting does not cancel appointments or delete booking, application, payment or audit records. Backup copies may remain until their retention period ends.

Your choices and help

Manual scheduling remains available when you explicitly choose it. Keep your working hours and blocked time current because manual mode cannot check outside-calendar conflicts. To request removal of retained calendar data or get connection help, contact office@ticklebar.com. Do not email passwords, access tokens or private event details.