Privacy Policy

1. What We Collect

When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We use this information to create and manage your XRAY Hourly account.

If you connect your Google Calendar, we access your calendar events to sync consultant availability and manage booking schedules. We store encrypted OAuth tokens to maintain this connection.

2. How We Use Your Data

• Account management: Your name and email identify you within the platform and enable session management.
• Calendar synchronization: Calendar data is used to determine consultant availability, create booking events, and detect scheduling changes.
• Booking and billing: We process booking details and time package purchases to deliver consulting services.
• Notifications: We send transactional emails for booking confirmations, reminders, and account updates.

3. Data Storage

Your data is stored in a PostgreSQL database. OAuth tokens for Google Calendar are encrypted at rest using AES-256-GCM. We do not sell, share, or provide your personal data to third parties for their own marketing purposes.

4. Third-Party Services

We use the following services to operate XRAY Hourly:

• Google: Authentication (sign-in) and Calendar integration
• Stripe: Payment processing for time packages
• Zoom: Video conferencing for consulting sessions
• Resend: Transactional email delivery

5. Data Retention and Deletion

You may request deletion of your account and associated data by contacting us. Upon request, we will delete your personal data, disconnect any linked Google Calendar, and revoke stored OAuth tokens. Billing records may be retained as required by law.

6. Contact

For privacy-related inquiries or data deletion requests, contact us at privacy@xrayworkflow.com.