Privacy Policy

Last updated: June 24, 2026

Schedo (“Schedo”, “we”, “us”) operates a scheduling marketplace that connects local service providers with customers. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Schedo you agree to this policy.

Information we collect

Provider accounts. When a provider registers, we collect their name, email address, password (stored only as a bcrypt hash), profession, service keywords, business location, and availability settings.

Guest bookings. Customers book without an account. When they book we collect the name, email, optional phone number, and any note they provide. This guest contact information is encrypted at rest using AES-256-GCM.

Google account data. If a provider signs in with Google, we receive their basic Google profile (name and email address) and a Google account identifier, which we use to create or link their Schedo provider account.

Google Calendar data. If a provider connects Google Calendar, we request read-only access (calendar.readonly) and read only the free/busy time ranges of their primary calendar. We do not read event titles, descriptions, attendees, locations, or any other event details. OAuth tokens are encrypted at rest.

How we use information

We use provider and booking information to operate the service: to publish provider profiles, match customers to providers, process bookings, prevent double-bookings, and send transactional emails (booking confirmations, requests, and status updates).

We use Google Calendar free/busy data for a single purpose: to automatically mark the times you are busy in your external calendar as unavailable in Schedo, so customers cannot book over your existing commitments. The sync is one-way (Google → Schedo); we never write to your Google Calendar.

Google API Services — Limited Use disclosure

Schedo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we only use Google Calendar data to provide and improve the calendar-availability feature described above; we do not transfer or sell this data to third parties; we do not use it for advertising; and no humans read your Google data except as needed for security, to comply with applicable law, or where you have given explicit consent.

How we share information

We do not sell your personal information. Provider profile details (name, profession, service area, availability) are shown publicly to help customers find and book you. Guest booking contact details are shared only with the provider for the relevant booking. We use a small number of service providers to run Schedo (database hosting and transactional email) who process data on our behalf. We may disclose information if required by law.

Data retention and security

We retain account and booking data for as long as your account is active or as needed to provide the service. Sensitive data — guest contact details and Google OAuth tokens — is encrypted at rest. You can disconnect Google Calendar at any time, which removes the stored tokens and the calendar-derived availability blocks.

Your choices

Providers can edit or remove their profile data and disconnect Google at any time from their dashboard settings. To request deletion of your account or any guest booking data, contact us at contact@schedo.me.

Children

Schedo is not directed to children under 16, and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

Contact

Questions about this policy? Email us at contact@schedo.me.