Privacy Policy

This Privacy Policy describes how the WillFind platform (hereinafter — «Platform») collects, uses and protects personal data of users in accordance with the EU General Data Protection Regulation (GDPR).

The controller of personal data and owner of the WillFind platform is:

Contact: [email protected]

• Name and surname (upon registration)
• Email address
• Phone number (optional, for business profiles)
• Service address (for business profiles)
• Technical data: IP address, browser type, cookies
• When a business user optionally connects Google Calendar: the available calendar list, free/busy availability, selected calendar identifier and OAuth credentials needed to operate the integration
• When a business user connects Google Calendar: the Google Account email address and verified-email status, used only during OAuth to validate the connected account; we do not persist, log or return this information

• Providing platform features (search, registration, listing publication)
• Communication with the user
• Analysis and improvement of the site (anonymous statistics)
• Fulfillment of legal obligations
• Providing online booking and an optional Google Calendar integration for business users

We use cookies for the correct operation of the site, saving settings and collecting anonymous analytics. Details — in our Cookie Policy.

We do not sell or transfer your personal data to third parties, except when it is necessary to provide services (e.g., hosting, payment systems) or required by law.

The platform uses Supabase (data storage, EU) and Vercel (hosting). If a business user connects it, Google Calendar is used solely to provide the chosen calendar integration.

Business users may optionally connect a Google Calendar account to support online appointment booking. WillFind accesses Google Calendar data only to provide that integration:

• the list of calendars available to the connected Google account, so the business user can choose an owned calendar for WillFind
• free/busy availability, so customers cannot book time when the business is unavailable
• the selected calendar only as necessary to create, update or cancel appointment events generated through WillFind
• Google OAuth access and refresh tokens only to operate this integration
• the selected calendar connection state, so the business user can manage or disconnect it
• when a calendar is selected, a WillFind booking event containing only the standard title “WillFind booking”, its start and end time, time zone and a technical event identifier; we do not send a customer's name, contact details or booking description to Google Calendar

During OAuth, WillFind temporarily reads the Google Account email address and verified-email status solely to validate that the connected account is verified. We do not persist, log or return this information to other users.

WillFind does not use Google Calendar data for advertising, marketing profiling, credit decisions or sale to third parties. When availability is sufficient, we do not store titles, descriptions, attendees or other content from unrelated calendar events.

Access tokens are never stored persistently and are held only in server memory while needed to call Google APIs; they are invalidated when the connection is disconnected. Refresh tokens are encrypted before storage and retained only while the connection remains active.

WillFind does not sell Google user data or transfer it to third parties, except to service providers that operate the Platform on our instructions, when required for security or by law, or to Google when a business user requests the visible booking-sync feature for the selected calendar.

Google Calendar data is not used to develop, improve or train generalized or non-personalized artificial intelligence or machine-learning models.

OAuth credentials are protected and are not exposed to other WillFind users. A business user can disconnect Google Calendar at any time. After disconnection, WillFind stops accessing the calendar and deletes the credentials associated with that integration, subject to applicable legal retention obligations.

WillFind's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

WillFind uses HTTPS/TLS to protect Google user data while it is transmitted between your browser, the Platform and Google. OAuth refresh tokens and short-lived PKCE code verifiers are encrypted with AES-256-GCM before they are stored.

Access is restricted to authenticated business owners and authorized backend services that need it to operate the booking integration. OAuth codes and tokens are not returned to the web or mobile apps and are not included in public API responses. A business user can revoke a connection by disconnecting Google Calendar, which deletes the stored credentials. We apply access-control and data-minimization measures designed to maintain the confidentiality of this data.

• Right to access your data
• Right to correction or deletion
• Right to restriction of processing
• Right to data portability
• Right to withdraw consent at any time

To exercise your rights, contact: [email protected]

We store data for the duration of the account and no longer than necessary for the stated purposes or as required by law. Google Calendar connection credentials are retained only while the connection remains active, unless a longer period is required by law.

We may update this Policy. We will notify you of significant changes on the site or by email. Before we access or use Google user data for a new category or purpose not disclosed in this Policy, we will update this Policy, notify affected users and obtain their affirmative consent before that use.