Covey · group scheduler

Privacy Policy

Last updated: June 2026

Covey ("Covey", "we", "us") is a scheduling tool that helps people find times that work for a group, share booking links, and connect their calendars. This policy explains what we collect, how we use it, and the choices you have. It applies to coveycal.com and the Covey service.

1. Information we collect

We collect only what we need to run the service:

Account information. If you create an account, we store your email address. Covey uses passwordless sign-in (a one-time link sent to your email); we do not store passwords.
Scheduling content. Availability polls you create, the responses people submit (including any name and optional email they provide), and booking links you set up.
Booking details. When someone books time with you, we store the meeting time and the name, email, and any optional answer the booker provides.
Google account data. Only if you choose to connect Google Calendar — see Section 4.
Billing information. If you subscribe to a paid plan, payments are processed by Stripe. We do not see or store your full card number; we store only a customer reference and your plan status.
Basic technical data. Standard server logs and a small amount of browser storage (for example, to remember your session and your own poll responses).

2. How we use information

To provide the service: create and display polls, compute overlapping availability, generate booking links, and record bookings.
To sign you in via one-time email links and keep you signed in.
To send transactional emails you'd expect — booking confirmations, calendar invites (.ics), and notifications you opt into (for example, "email me when people respond").
To manage subscriptions and billing through Stripe.
To maintain security, prevent abuse, and fix problems.

We do not sell your personal information, and we do not show ads.

3. How information is shared

We share data only with service providers that help us operate Covey, and only as needed:

Netlify — hosting and data storage.
Resend — sending transactional email.
Stripe — payment processing for paid plans.
Google — calendar access you explicitly authorize (Section 4).

We may also disclose information if required by law. When you share a poll or booking link, the information you put into it is visible to the people you share it with.

4. Google user data

Connecting Google Calendar is optional. If you connect it, you grant Covey access through Google OAuth to:

Free/busy and calendar reading (calendar.readonly) — so Covey can hide times you're already busy and avoid double-booking.
Calendar events (calendar.events) — so Covey can add a confirmed booking to your calendar and remove it if the booking is cancelled.

We store the Google authorization tokens needed to do this, and your Google account email, on your behalf. We access your calendar only to provide these scheduling features. You can disconnect Google Calendar at any time from within Covey, which revokes Covey's access and deletes the stored tokens. You can also revoke access at myaccount.google.com/permissions.

Limited Use disclosure. Covey's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not transfer or use it for any purpose other than providing and improving the calendar features you enable. We do not allow humans to read your Google data except where you give explicit consent, where required for security or to comply with law, or where the data is aggregated and anonymized.

5. Data retention

We keep your data while your account or content is active. Polls and bookings persist until you delete them or your account. If you disconnect Google Calendar, the stored Google tokens are deleted. You can request deletion of your account and associated data by contacting us (Section 9).

6. Security

We use reputable infrastructure providers and access controls to protect your data. No method of transmission or storage is perfectly secure, but we take reasonable measures to safeguard your information.

7. Your choices

Connect or disconnect Google Calendar at any time.
Opt out of notification emails by not enabling them.
Manage or cancel a paid subscription through the billing portal.
Request access to or deletion of your data (Section 9).

8. Children

Covey is not directed to children under 13, and we do not knowingly collect their personal information.

9. Contact

Questions or requests about this policy or your data: jpnalu@gmail.com.

10. Changes

We may update this policy from time to time. We'll revise the "Last updated" date above and, for material changes, provide a more prominent notice.