Privacy policy

Snowdrop AB, Vegagatan 14, 113 29 Stockholm, Sweden. Contact: lennart.boklund@snowdrop.se.

Snowdrop Connect is a booking application where clients schedule sessions with Snowdrop consultants. Consultants may optionally connect their Google Calendar so availability reflects their real calendar and confirmed bookings are written back as calendar events.

• Account data: name and email address from sign-in.
• Booking data: client name, email, selected service, time and any notes provided.
• Google data (only if a consultant connects Google Calendar): the Google account email address, OAuth refresh and access tokens, the list of calendars, busy/free time blocks and the booking events the service creates.

We request the following Google OAuth scopes and use them solely for these purposes:

• calendar.readonly — read busy/free times to compute available booking slots.
• calendar.events — create, update and delete booking events on the calendar the consultant has chosen.
• openid and email — identify the connected Google account.

Snowdrop Connect's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is never sold, never used for advertising, and never used to train AI or machine-learning models. Access is limited to providing and improving the booking feature.

We do not sell personal data. Data is processed by the following sub-processors: Supabase (hosting, database and authentication via Lovable Cloud) and Google (Calendar API). No other third parties receive the data.

Data is stored in the EU region. OAuth tokens are protected at rest, access is enforced by row-level security in the database, and all transport uses HTTPS.

Bookings are kept while the account is active. Google tokens are kept until the consultant disconnects their Google account. We delete data on request.

• Disconnect Google Calendar at any time from the consultant dashboard.
• Revoke the app's access directly at Google on myaccount.google.com/permissions.
• Request account and data deletion via the contact address below.

You have the right to access, rectification, erasure, restriction, data portability and to object to processing. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

The service is not directed at children under 16.

We may update this policy. Changes are published on this page together with a new "Last updated" date.

Snowdrop AB, Vegagatan 14, 113 29 Stockholm, Sweden. lennart.boklund@snowdrop.se