Privacy notice for the DVT app

For each business: its team members' names and email addresses; the contacts, messages, form submissions, notes and appointments it receives through the app; and its settings. People who book an appointment give us their name, email address, phone number and their answers to the business's questions, so the business can meet them and send them confirmations and reminders.

This data belongs to the business it was collected for, is kept apart from every other business's, and is used only to run the app for them.

A team member can connect their Google Calendar under Settings → Connections, so people booking them can't pick a time they're busy, and so new appointments appear in their calendar. Connecting is optional and is done by each person for themselves. When they connect, Google asks them to allow DVT to:

• See their email address, to show which Google account is connected.
• See the list of their calendars, so they can choose which ones count as busy and which one appointments are added to.
• See and edit events on their calendars. We read the start and end times of events, and whether each is marked busy or free, on the calendars they chose, to work out when they're available. We don't keep event titles, descriptions, attendees or locations. We create an event for each appointment booked with them, move it if the appointment is rescheduled, and delete it if it's cancelled. We never change or delete events we didn't create.

What we store: the connection's refresh token, encrypted; the chosen calendars; busy times (start and end only) for the next 60 days, refreshed every 5 minutes and replaced each time; and the identifiers of the events we created. We use this only to show available times and keep appointments in the calendar. It is not sold, used for advertising, used to train AI models, or shared with anyone. Our staff don't read it, except when the person asks us for help with their connection or the law requires it.

DVT's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting. Choosing Disconnect under Settings → Connections revokes DVT's access with Google and deletes the stored token and busy times at once. Events already added to the calendar stay there, as the person's own. Access can also be removed at any time from the Google account's security settings (myaccount.google.com/permissions); the app then stops reading and writing the calendar and asks the person to reconnect.

The app and its database run on a server we manage, hosted by IONOS. Emails (sign-in links, booking confirmations, reminders and alerts) are sent through Postmark. No Google user data is passed to Postmark or anyone else; an appointment email contains only the appointment's own details.

We keep a business's data while it uses the app. When a business stops, or anyone asks us to delete their data, we delete it from the app within 30 days. Copies in our backups are deleted as those backups expire on their regular schedule.

Questions or requests about this notice or your data: Digital Vallance Technologies, Attn: Privacy, email tyson@dvtteam.com.