Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, make a booking, or contact us for support.

• Account Information: Name, email address, phone number, and business information
• Booking Information: Appointment details, client information, and payment data
• Google Calendar Data: When you connect your Google Calendar, we access your calendar events to sync appointments and manage your schedule
• Usage Information: How you interact with our platform, including pages visited and features used

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process bookings and payments
• Sync your appointments with Google Calendar
• Send you important updates about your account and bookings
• Provide customer support
• Comply with legal obligations

3. Google Calendar Integration

When you choose to connect your Google Calendar account, we will:

• Read your list of calendars so you can choose which one to sync with
• Check your free/busy status to prevent double-bookings
• Create new calendar events for your bookings
• Update or delete events when bookings are modified or cancelled
• Only access calendar data strictly necessary for the booking functionality described above

We request the following Google API scopes: calendar.events, calendar.calendarlist.readonly, and calendar.freebusy. We do not request full read/write access to all your calendars.

Data storage: We store your OAuth access token and refresh token in our database solely to maintain the calendar connection. We do not store copies of your calendar events - we only create, update, or delete events in your Google Calendar on your behalf. When you disconnect Google Calendar from your Outline account, all stored tokens are immediately revoked at Google and permanently deleted from our database.

You can revoke this access at any time through your Google Account settings at myaccount.google.com/permissions or by disconnecting the integration in your Outline account settings.

Outline's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties, except:

• Service Providers: We share information with trusted third parties who assist us in operating our platform (e.g., Stripe for payments, Google for calendar integration)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Limited access to personal information on a need-to-know basis
• Secure payment processing through Stripe

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service provider
• Objection: Object to processing of your personal information

To exercise these rights, please contact us at hello@getoutline.app.

7. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or regulatory purposes.

Google Calendar data: OAuth tokens are stored only for the duration of your Google Calendar connection. When you disconnect, tokens are immediately revoked at Google and deleted from our systems. Calendar events created by Outline in your Google Calendar remain under your control in your Google account. We do not retain any copies of your Google Calendar data.

8. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers are conducted in accordance with applicable data protection laws and that appropriate safeguards are in place.

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: