Privacy Policy

1. Who we are

Find Me Time is a scheduling service that helps organizers share booking links and manage availability.

For operator contact, use: https://gomilkyway.com/contact/

The contact form is operated by the same operator responsible for this application.

2. Information we collect

Depending on how you use the service, we may collect:

• Account information: email address, display name, and profile image when you sign in with email (magic link or password), Google, GitHub, passkey, or two-factor authentication.
• Session and security data: session cookies, authentication tokens (stored securely), and related device or browser signals needed to keep you signed in.
• Organizer content: availability patterns, booking pages, polls, themes, and settings you create.
• Guest booking data: names, optional email addresses, messages, and chosen time slots that guests submit on public booking or poll pages.
• Technical and abuse-prevention data: IP address and related request metadata used for rate limiting, health checks, and bot protection (including Cloudflare Turnstile verification outcomes). We do not use Turnstile for advertising.

3. Google user data

If you sign in with Google, we access Google account information that you authorize on the Google consent screen—typically your email address, name, and profile image—solely to create or authenticate your Find Me Time organizer account.

• We use Google user data only to provide and improve user-facing authentication and account features of Find Me Time.
• We do not sell Google user data. We do not use Google user data for advertising. We do not use Google user data for AI/ML training unrelated to operating this service.
• Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements, to the extent applicable to our Sign-In integration.

4. How we use information

We use the information above to:

• Authenticate organizers and maintain sessions (including magic links, password reset, passkeys, and two-factor authentication).
• Operate booking pages, availability, polls, and related product features.
• Send transactional email such as sign-in links, password resets, and booking confirmations or updates when an email address is provided.
• Protect the service against abuse (rate limits, captcha, security logging).

5. Sharing and processors

We do not sell personal information. We share data with service providers only as needed to run the product, for example:

• Hosting and application delivery (e.g. Vercel).
• Database hosting (e.g. Neon / PostgreSQL).
• Transactional email delivery (e.g. SMTP / Amazon SES or equivalent).
• Bot protection (Cloudflare Turnstile siteverify).

These providers process data under their own terms and security practices. Guest booking details may be visible to the organizer who owns the booking page, as required to fulfill the booking.

6. Retention and deletion

We retain account and booking-related data while your account or the relevant booking pages remain active, and for a limited period afterward as needed for security, backups, or legal obligations. You may request deletion of your organizer account and associated data by contacting us via the contact form linked in this policy. Guests who provided an email may contact the organizer or us to request correction or deletion of their booking information where feasible.

7. Security

We use industry-standard measures appropriate to this service, including HTTPS in production, hashed public manage/cancel tokens where applicable, session controls, password policy for credential accounts, rate limiting, and Turnstile on selected public forms. No method of transmission or storage is 100% secure.

8. Children’s privacy

Find Me Time is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.

9. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the service after an update means you accept the revised policy. Material changes to how we use Google user data will be reflected here.