Privacy Policy
Version 2026-08 · Last updated: September 2026
TakeMySlot is a scheduling tool at takemyslot.org, operated by Pavel Kravets (Mexico) — "we", "us". Questions and data-subject requests: privacy@takemyslot.org.
Our two roles
Your account is ours to answer for. For the data needed to give you an account and keep it secure, we are the controller and this policy applies.
Your calendar is yours. Everything you put into it — your contacts, meeting titles and notes, files, and the details a guest submits when booking with you — belongs to you. For that data the account holder is the controller and we only store and transmit it on their instructions. If you are a guest and want your booking data corrected or deleted, contact the person whose booking page you used; we act on their instruction.
What we process as controller
- Account — email, name, and the settings you choose (language, timezone, time format, booking preferences).
- Sign-in and security — sign-in events, recognised devices, and the country derived from your IP address.
- Messages you send us — correspondence about the service.
Why, and on what basis
- To provide the service you asked for — performance of a contract.
- To keep the service secure and free of abuse — our legitimate interests.
- To connect Google Calendar — your consent, given when you connect and withdrawable at any time.
- To comply with the law where it applies to us.
We do not sell personal data, do not use it for advertising, and do not profile you.
Who else processes it
- Supabase — database, authentication and file storage.
- Resend — delivery of the emails the service sends.
- Google — only if you connect Google Calendar.
- Cloudflare — the bot check on sign-in and on public booking pages. It runs in the visitor's browser, so Cloudflare receives their IP address and browser signals.
- Our hosting provider — runs the application.
Where the service determines a country from an IP address, the lookup runs against a local database; no data is sent to its supplier.
Google user data
Connecting Google Calendar is optional. TakeMySlot requests only non-sensitive scopes: free/busy times, the calendars in your list, and an app-created calendar for the events it books. It never reads the contents of your other events. TakeMySlot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google access tokens are stored encrypted and used only for these features. Disconnecting Google in Calendar settings removes the events the service created.
Cookies and local storage
Only what the service cannot work without: a sign-in session issued by our authentication provider, a locale cookie with the language you picked, and local storage for your display choices (theme, time format, calendar layout). While you are signed in, the app also keeps a copy of your own recent screens (profile, calendar week, links, contacts) in your browser's local storage so they open instantly; it is erased when you sign out. The bot check on sign-in and booking pages runs in your browser as a security measure. There is no analytics, advertising or tracking of any kind, which is why the site asks for no cookie consent.
Where data goes
The processors above may process data outside your country, including in the United States. Those transfers rely on the European Commission's standard contractual clauses and, where the processor is certified, the EU-US Data Privacy Framework.
How long we keep it
- Account data — until you delete your account, which you can do at any time in Settings. Deletion is immediate and irreversible.
- Calendar and booking data — for as long as the account holder keeps it, and no longer than their account.
- Security and technical records — only as long as needed to detect and investigate abuse, then discarded.
Your rights
Subject to the law that applies to you, you may request access to your data, its correction, deletion, restriction or portability, object to processing, and withdraw any consent you gave. Write to privacy@takemyslot.org. Where the data belongs to an account holder's calendar rather than to us, we pass the request to them. You may also lodge a complaint with the data protection supervisory authority of your country.
Age
The service is not intended for anyone under 16, and we do not knowingly collect their data.
Changes
The version and date at the top change when this policy does. We announce material changes at your account email or in the app before they take effect.