Privacy Policy

Effective date: 29 June 2026
Application name: Clavos
Website: https://clavos.ee
Contact: salong@clavos.ee

This Privacy Policy explains how Clavos accesses, uses, stores, protects, shares, retains, and deletes user data, including data obtained from Google APIs.

1. Purpose of Google Calendar Integration

Clavos uses Google Calendar integration only for appointment booking functionality.

The purpose of the integration is to synchronize appointments from the Clavos website booking system to Google Calendar. When an appointment is created, changed, or cancelled in the Clavos booking system, the corresponding event may be created, updated, or deleted in Google Calendar.

The synchronization is one-way: from the Clavos website booking system to Google Calendar.

Clavos does not use Google APIs for any other purpose.

2. Google User Data We Access

When an authorized user connects Clavos with Google Calendar, Clavos may access only the Google Calendar data required to create, update, or delete appointment events in the connected Google Calendar.

Clavos may access or interact with the following Google user data:

• The connected Google account information required to authorize the Calendar integration.
• Google Calendar event data created by the Clavos booking system.
• Calendar event title, date, time, duration, and event identifier.
• OAuth access tokens and refresh tokens required to maintain the authorized Google Calendar connection.

The calendar events created by Clavos contain only the service name and appointment time. Client personal data is not included in the Google Calendar event.

Clavos does not access Gmail, Google Drive, Google Sheets, Google Contacts, or other Google services.

Clavos does not read, collect, or process unrelated Google Calendar events that were not created by the Clavos booking system.

3. How We Use Google User Data

Clavos uses Google user data only to provide one-way appointment synchronization from the Clavos booking system to Google Calendar.

Google Calendar access may be used to:

• Create appointment events in Google Calendar when a booking is created in the Clavos booking system.
• Update appointment events in Google Calendar when a booking is changed in the Clavos booking system.
• Delete or cancel appointment events in Google Calendar when a booking is cancelled in the Clavos booking system.
• Maintain the authorized connection between Clavos and Google Calendar.

Clavos does not use Google user data for advertising.
Clavos does not sell Google user data.
Clavos does not use Google user data to build advertising profiles.
Clavos does not use Google user data for unrelated analytics, marketing, or profiling purposes.

4. AI/ML Model Training Disclosure

Clavos does not use Google user data to develop, improve, or train artificial intelligence or machine learning models.

Google Calendar data accessed through Google APIs is used only for the appointment synchronization functionality described in this Privacy Policy.

5. Data Sharing

Clavos does not sell, rent, or trade Google user data.

Google user data is not shared with third parties for advertising, marketing, or profiling purposes.

Google user data may be processed by service providers that are necessary to operate the website and booking system, such as website hosting, database, security, maintenance, and technical support providers. These providers may process data only as necessary to provide their services.

Google user data may also be disclosed if required by law, legal process, or to protect the security, rights, or integrity of Clavos, its users, or the public.

Clavos’ use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Storage and Protection

Google Calendar integration data is stored and processed within the Clavos website and booking system environment.

OAuth access tokens and refresh tokens may be stored by the website booking system in order to maintain the authorized Google Calendar connection.

Clavos applies reasonable technical and organizational measures to protect user data, including:

• HTTPS encryption for website communication.
• Access controls for website administration.
• Secure handling of OAuth access tokens and refresh tokens.
• Limited access to administrative systems.
• Regular website, plugin, and server maintenance.
• Security monitoring and technical safeguards where appropriate.

OAuth tokens are used only to maintain the authorized Google Calendar connection and are not used for any unrelated purpose.

7. Data Retention

Clavos retains Google Calendar integration data only for as long as necessary to provide the appointment booking and calendar synchronization functionality.

Appointment-related data may be retained for operational, customer service, accounting, legal, or security purposes.

OAuth tokens are retained only while the Google Calendar integration remains active. If the integration is disconnected, the related OAuth tokens are deleted, invalidated, or no longer used.

8. Data Deletion

Users may request deletion of their personal data and Google Calendar integration data by contacting:

salong@clavos.ee

After receiving a deletion request, Clavos will delete or anonymize the relevant personal data unless retention is required for legal, accounting, security, dispute resolution, or legitimate business purposes.

Users may also revoke Clavos’ access to their Google account at any time through their Google Account permissions page:

https://myaccount.google.com/permissions

After access is revoked, Clavos will no longer be able to create, update, or delete appointment events in the user’s Google Calendar unless the user authorizes access again.

9. User Control

Google Calendar access is granted only after the user authorizes the connection through Google OAuth.

The user may revoke this access at any time from their Google Account settings or by disconnecting the Google Calendar integration in the booking system, where available.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated effective date.

11. Contact

For questions about this Privacy Policy or requests regarding your data, please contact:

Clavos
Website: https://clavos.ee
Email: salong@clavos.ee