Calendar Booking Service
Start free
Calendar Booking Service
Start free

Privacy Policy

Last updated: 8 July 2026

1. Introduction

This Privacy Policy explains how Cross Platform Consulting (Pty) Ltd ("we", "us", or "our") collects, uses, discloses, and protects personal information when you use Calendar Booking Service (the "Service"), including our marketing website, platform application, and related services operated at calendarbookingservice.com and associated subdomains.

We are committed to protecting your privacy and handling personal information in accordance with applicable data protection laws, including the Protection of Personal Information Act, 2013 (POPIA) in South Africa and, where applicable, the General Data Protection Regulation (GDPR).

By using the Service, you acknowledge that you have read this Privacy Policy. If you do not agree, please do not use the Service.

2. Roles and responsibilities

Calendar Booking Service is a multi-tenant software platform. Depending on how you interact with the Service, different parties may process your personal information:

  • Platform operator: Cross Platform Consulting (Pty) Ltd operates the platform, hosts accounts for business users ("Tenants"), and provides core infrastructure.
  • Payment processor: Cross Platform Consulting LLC, an affiliated entity of Cross Platform Consulting (Pty) Ltd, processes Pro subscription payments and operates the Stripe Connect platform used by Tenants to accept booking payments. Card details for subscriptions are handled by Stripe.
  • Tenants: Businesses that use the Service to offer booking pages to their clients. When you book with a Tenant, that Tenant is typically the controller of your booking-related personal information. Their use of your data is governed by their own policies and practices.
  • End customers: Individuals who create accounts or book appointments through a Tenant's booking page.

Questions about a specific booking should be directed to the relevant Tenant. Questions about platform-level processing may be sent to us at support@crossplatform.co.za.

3. Information we collect

The information we collect depends on your relationship with the Service.

3.1 Tenant account holders and team members

  • Account details such as name, email address, and password (stored in hashed form).
  • Business and workspace information, including organisation name, subdomain, branding, and settings.
  • Billing and subscription data, including plan selection, trial status, invoices, and payment method metadata processed by Stripe. We do not store full payment card numbers.
  • Integration credentials and tokens when you connect third-party services such as Google Calendar, Microsoft Outlook, iCloud Calendar, Zoom, Microsoft Teams, or Stripe Connect.
  • Usage, log, and security data, including IP address, browser type, device information, authentication events, and activity within the platform.

3.2 End customers booking through a Tenant

  • Contact details provided during booking, such as name and email address.
  • Booking details, including selected meeting type, date and time, timezone, location or video preferences, and answers to intake questions configured by the Tenant.
  • Payment-related information for paid bookings processed through the Tenant's connected Stripe account, including transaction status and amount. Card details are handled directly by Stripe.
  • Account credentials if the Tenant enables customer login on their booking site.

3.3 Marketing website visitors

  • Technical data such as IP address, browser type, referring URL, and pages viewed.
  • Cookie and similar technology data as described in Section 8.

4. How we use personal information

We use personal information to:

  • Provide, operate, maintain, and improve the Service.
  • Create and manage accounts, authenticate users, and enforce security measures including optional two-factor authentication.
  • Process bookings, availability, calendar synchronisation, notifications, and video meeting links.
  • Process subscription payments and manage billing through Stripe, with Pro subscription charges collected by Cross Platform Consulting LLC on our behalf.
  • Enable Tenants to accept payments from their customers through Stripe Connect, operated by Cross Platform Consulting LLC.
  • Send service-related communications, such as booking confirmations, reminders, account notices, and security alerts.
  • Respond to support requests and troubleshoot issues.
  • Monitor usage, prevent fraud and abuse, and protect the security and integrity of the Service.
  • Comply with legal obligations and enforce our Terms of Service.

We process personal information based on one or more of the following legal bases, as applicable: performance of a contract, legitimate interests, consent, and compliance with legal obligations.

5. How we share personal information

We do not sell personal information. We may share information in the following circumstances:

  • With Tenants: When you book through a Tenant, your booking information is made available to that Tenant and their authorised users.
  • With service providers: We use trusted third parties to help operate the Service, including hosting providers, email delivery services, and payment processors.
  • With integrated third-party services: When you or a Tenant connects external services, relevant data is shared as needed to provide the integration. This may include Google, Microsoft, Zoom, and Stripe.
  • For legal reasons: We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of users, the public, or our organisation.
  • Business transfers: If we are involved in a merger, acquisition, reorganisation, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate safeguards.

6. Third-party services

The Service relies on third-party providers whose privacy practices are governed by their own policies, including:

  • Stripe: Pro subscription billing and, for Tenants on Pro plans, customer payment processing via Stripe Connect. These services are provided through Cross Platform Consulting LLC.
  • Google: Google Calendar synchronisation and OAuth authentication where enabled. See Section 7 for Google user data details.
  • Microsoft: Outlook calendar synchronisation, Teams meeting links, and OAuth authentication where enabled.
  • Apple: iCloud Calendar synchronisation via CalDAV using an app-specific password where enabled.
  • Zoom: video meeting link generation where enabled.

Tenant booking pages may also display third-party content or links controlled by the Tenant. We are not responsible for the privacy practices of Tenants or other third parties outside our platform.

7. Google user data

When a Tenant connects Google Calendar, Calendar Booking Service accesses Google user data solely to provide calendar synchronisation features. This section describes that processing in detail.

7.1 Data access

We access the following Google user data:

  • Your primary Google Account email address (via the userinfo.email scope), used to identify the connected account on the Integrations page.
  • Event data on Google calendars you own (via the calendar.events.owned scope), including event titles, times, transparency/busy status, and event identifiers needed for sync.

We do not request access to Gmail, Google Drive, Contacts, Photos, or calendars you do not own.

7.2 Data use

We use Google user data only to:

  • Display the connected Google account on the Integrations page.
  • Read owned-calendar events so public booking availability reflects busy times.
  • Create, update, and delete events on calendars you own when bookings are confirmed, changed, or cancelled, and when you block time in Calendar Booking Service.

We do not use Google user data for advertising, credit decisions, or any purpose unrelated to providing or improving these user-facing calendar features.

7.3 Data transfer / sharing

  • Google user data is not sold.
  • Google user data is not transferred to data brokers or advertisers.
  • Booking details (such as customer name, email, meeting type, and join links) may be written into Google Calendar events so they appear on the Tenant's calendar. That write-back is part of providing the integration.
  • Hosting and infrastructure providers that process our application data may process stored tokens and sync metadata as part of operating the Service, under appropriate safeguards.

7.4 Data protection

OAuth tokens and sync metadata are stored with access controls and tenant isolation. Communication with Google APIs uses encrypted connections (HTTPS/TLS). Access to Tenant workspaces is authenticated and authorised to the Tenant's users.

7.5 Data retention and deletion

  • Google OAuth tokens and connected-account metadata are retained while the Google Calendar integration remains connected.
  • External Google event IDs needed for sync are retained while the related booking or block exists, or until the integration is disconnected.
  • Disconnecting Google Calendar in Calendar Booking Service deletes stored Google OAuth tokens for that workspace, removes Calendar Booking Service-created booking/block events from Google Calendar where possible, and clears imported Google events from the Calendar Booking Service calendar view.
  • You may also revoke access in your Google Account security settings. We recommend disconnecting inside Calendar Booking Service as well so workspace status stays accurate.
  • Account deletion and other retention practices follow Section 8 and applicable law.

7.6 Limited Use and AI/ML restrictions

The use of raw or derived user data received from Google APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

  • Google user data is used only to provide or improve user-facing features that are prominent in the requesting application's user interface.
  • Google user data is not used to develop, improve, or train generalised AI and/or ML models.
  • Google user data is not transferred to third-party AI/ML services for model training.

7A. iCloud Calendar credentials

When a Tenant connects iCloud Calendar, Calendar Booking Service stores the Apple ID and app-specific password solely to provide calendar synchronisation features.

  • Credentials are encrypted at rest and used only to read and write events on the single iCloud calendar selected during setup.
  • Booking details may be written into iCloud calendar events so they appear on the Tenant's calendar.
  • Disconnecting iCloud Calendar deletes stored credentials for that workspace, removes Calendar Booking Service-created booking/block events from iCloud where possible, and clears imported iCloud events from the Calendar Booking Service calendar view.

8. Data retention

We retain personal information for as long as necessary to provide the Service, fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements.

When a Tenant account is closed, we may retain or delete data in accordance with our backup, legal, and operational requirements. Tenants are responsible for exporting any data they need before closure.

You may request deletion of your platform account subject to applicable law and legitimate retention needs.

9. Cookies and similar technologies

We use cookies and similar technologies to operate the Service, keep you signed in, remember preferences such as theme settings, maintain security, and understand how the marketing site is used.

Types of cookies we may use include:

  • Essential cookies required for authentication, session management, and security.
  • Functional cookies that remember preferences and improve usability.
  • Analytics cookies, where used, to understand traffic and usage patterns.

You can control cookies through your browser settings. Disabling essential cookies may prevent parts of the Service from functioning correctly.

10. Security

We implement appropriate technical and organisational measures designed to protect personal information, including encryption in transit, access controls, tenant data isolation, and secure credential handling.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

11. International transfers

Your information may be processed in countries other than your own, including the Republic of South Africa and the State of Wyoming, United States, where our service providers operate. Where required, we take steps designed to ensure appropriate safeguards for cross-border transfers.

12. Your rights and choices

Depending on your location and applicable law, you may have rights to:

  • Access personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of personal information, subject to legal exceptions.
  • Object to or restrict certain processing activities.
  • Withdraw consent where processing is based on consent.
  • Request portability of information you provided in a structured, commonly used format.
  • Lodge a complaint with a supervisory authority.

To exercise these rights, contact us at support@crossplatform.co.za. We may need to verify your identity before responding. If your request relates to a booking with a Tenant, we may direct you to that Tenant where appropriate.

Account holders can update profile information and security settings within the Service. Marketing emails, where sent, will include an unsubscribe option where required by law.

13. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and update the "Last updated" date. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.

15. Contact us

If you have questions or requests regarding this Privacy Policy or our data practices, contact:

Information officer / privacy enquiries: support@crossplatform.co.za

Governing jurisdiction: Republic of South Africa