Privacy Policy

1. Introduction

Twivo ("we," "us," or "our") respects your privacy and is committed to protecting the personal information you entrust to us. This Privacy Policy describes how we collect, use, store, share, and safeguard personal data when you use the Twivo scheduling platform and related services (the "Service"). It also explains your rights and choices regarding your data.

2. Data Controller

The entity responsible for processing your personal data is Twivo. If you have questions about this Privacy Policy or how we handle your data, please contact us at hello@twivo.co.

3. Information We Collect

We collect the following categories of information:

• Account and profile information. When you register via Google sign-in, we receive your email address and name. You may also provide a business name, profile slug, bio, availability preferences, service settings, and an in-person location.
• Client-provided booking details. When a client books an appointment through your Twivo page, we collect the information they submit, such as name, email address, phone number, company, and reason for the visit.
• Google Calendar data. With your explicit consent, we access your Google Calendar through the Google Calendar API to read free/busy availability and create or manage events on your behalf. We do not access the content of unrelated calendar events except as necessary to identify conflicts.
• Usage and technical information. We collect standard log data, device and browser information, and error reports to operate and improve the Service.

4. How We Use Your Information

We use personal data only for the purposes necessary to provide and improve the Service:

• To create and manage your Twivo account and booking page.
• To check real-time availability and create confirmed calendar events in your Google Calendar.
• To generate Google Meet links for video appointments and include location details for in-person appointments.
• To communicate with you about service updates, security notices, or support requests.
• To maintain security, prevent fraud, and enforce our Terms of Service.
• To analyze aggregated usage and diagnose technical issues.

5. Google Calendar Data Compliance

Twivo's use of information received from Google APIs is strictly limited to the purposes described above and is subject to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Calendar data is used solely to check availability and to create, update, or manage booking events.
• We do not sell, rent, or share Google Calendar data with any third party for advertising, marketing, or data-brokerage purposes.
• We do not use Google Calendar data to build user profiles for ad targeting, personalization, or any purpose unrelated to the Service.
• Access tokens and connection keys are encrypted and stored securely. You may revoke our access at any time through your Google account settings or the Twivo workspace.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share data only with:

• Service providers. Trusted third-party vendors that provide hosting, infrastructure, security, analytics, and customer support on our behalf and under strict confidentiality obligations.
• Legal authorities. When required to comply with applicable law, court order, legal process, or governmental request, or to protect our rights, property, or safety.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, in which case your data would be transferred subject to the same privacy commitments.

7. Data Security

We implement appropriate technical and organizational safeguards to protect your data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, secure authentication, and regular security reviews. No system is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will erase or anonymize your personal data within a reasonable timeframe, except where retention is required by law.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, or to request a copy of the data we hold about you, contact us at hello@twivo.co. You may also disconnect your Google Calendar integration at any time from your Twivo workspace.

10. Cookies and Tracking Technologies

We use a minimal set of cookies and similar technologies to authenticate users, maintain sessions, and understand basic usage patterns. These are not used for behavioral advertising or cross-site tracking.

11. Children's Privacy

The Service is not intended for individuals under the age of 18, or under the age of majority in their jurisdiction. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us so we can delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will be posted on this page with an updated effective date. Material changes will be notified to you by email or through the Service. Your continued use of the Service after any update constitutes acceptance of the revised Policy.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at hello@twivo.co.