Privacy Policy

This Privacy Policy explains how Flux Sync ("Flux Sync," "we," "us") collects, uses, and protects information when you use our interview-scheduling software at flux-sync.com (the "Service"). By using the Service you agree to this policy.

Who this applies to

The Service is used by two groups: account owners and their team members (the businesses that sign up and connect calendars) and candidates (people who book interviews through a customer's booking link). This policy covers both.

Information we collect

• Account information. When you sign in with Google, we receive your name, email address, and basic profile info to create and identify your account.
• Google Calendar data. When a team member connects their Google Calendar, we access free/busy availability and create calendar events for booked interviews. See the Google API section below.
• Booking information. When a candidate books, we collect the name, email, phone number, and answers to the questions the account owner configured.
• Payment information. Subscriptions are processed by Stripe. We do not store your full card details; Stripe handles payment data under its own privacy policy.
• Technical data. Standard log and device data (IP address, browser) used for security and reliability.

Google API Services — access and Limited Use

Flux Sync requests the Google Calendar scopes calendar.events and calendar.readonly solely to (a) read a connected calendar's free/busy times to show available slots, and (b) create and manage interview events booked through the Service. We store the OAuth tokens needed to maintain this connection, encrypted at rest.

Flux Sync's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it except as necessary for support with your consent, to comply with law, or for security.

How we use information

• To provide scheduling: compute availability, create bookings, and post events to calendars.
• To send transactional messages: booking confirmations, calendar invites, and reminders by email and (if enabled) SMS.
• To operate billing, provide support, secure the Service, and meet legal obligations.

How we share information

We do not sell personal information. We share data only with service providers that help us run the Service:

• Google — calendar access and sign-in
• Supabase — database and authentication
• Vercel — application hosting
• Resend — sending email
• Twilio — sending SMS (when enabled)
• Stripe — subscription payments

We may also disclose information if required by law or to protect rights and safety.

Data retention

We keep account, booking, and calendar-connection data for as long as your account is active. When you disconnect a calendar or delete a team member, the associated Google tokens are removed. You can request deletion of your account and associated data at any time (see Contact).

Your choices & rights

• Disconnect a Google Calendar at any time from your dashboard, or revoke access in your Google Account settings.
• Request access to, correction of, or deletion of your personal data by emailing us.
• Candidates may reply to any message to reach the account that booked them.

SMS messaging

If SMS is enabled, candidates and team members may receive booking confirmations and reminders. Message and data rates may apply. Reply STOP to opt out of further texts.

Security

We use industry-standard measures including encryption in transit, encrypted token storage, and row-level data isolation so customers can only access their own data. No method of transmission or storage is 100% secure.

Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Contact

Questions or requests: fluxscalez@icloud.com.