Privacy Policy - Attendez

Who we are

Our website address is: https://attendez.in.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Visitor comments may be checked through an automated spam detection service.

🔐 Google Calendar Integration & Data Usage

Our platform enables turf owners to manage multiple turf facilities by integrating with Google Calendar.

Why We Require Calendar Access

To support turf management, our application:
Creates separate calendars for each turf
Manages booking schedules within those calendars
Ensures accurate availability and prevents conflicts

This requires permission to create, modify, and delete calendars and events.

Data We Access
With user authorization, we may access:

Calendar list and metadata
Calendar events (title, start time, end time)
Availability/free-busy information

How We Use This Data
We use Google Calendar data strictly for:

Creating dedicated calendars for each turf owned by the user
Displaying real-time turf availability to customers
Creating booking events when a reservation is confirmed
Updating or deleting events when bookings are modified or cancelled

We do not use this data for advertising, profiling, or marketing purposes.

Data Storage
We store only necessary booking-related data such as:

Event IDs
Booking time slots
Turf identifiers
We do not store full calendar data unnecessarily

Data Sharing
We do not sell Google user data.
However, data may be processed by infrastructure providers required to operate the service, such as:

Cloud hosting providers
Databases
Payment gateways (only for transaction processing)

Data Retention & Deletion
Data is retained only as long as required for booking operations

Turf owners can:

Disconnect their Google Calendar at any time
Request deletion of their data by contacting: [email protected]
Upon disconnection, access to Google data is revoked immediately

User Control

Access is granted via Google OAuth 2.0
Users can revoke access anytime via Google Account permissions
Compliance with Google Policies

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
We confirm:

Data is only used to provide user-facing functionality
Data is not used for advertising
Data is not sold or transferred unnecessarily

Data Sharing, Transfer, and Disclosure of Google User Data

Attendez does not sell, rent, trade, or disclose Google user data to advertisers, marketing platforms, data brokers, unrelated third parties, or venue administrators.
Google Calendar access is controlled by the owner of the Google Calendar. Attendez may provide platform features that allow the calendar owner to grant, manage, or revoke access for staff members or venue administrators using Google Calendar API-based access controls. Any such access is initiated and controlled by the calendar owner for the limited purpose of managing turf availability, bookings, schedules, cancellations, and related venue operations.
Attendez does not independently share, transfer, or disclose Google Calendar data to staff members, venue administrators, or any other third party without authorization from the calendar owner.
Attendez uses Google Calendar data only to provide turf availability, booking, scheduling, cancellation, and calendar management features requested by the venue owner.
Customers using Attendez may only see booking slot availability, such as whether a time slot is available or unavailable. Customers do not receive access to the venue owner’s Google Calendar, unrelated calendar events, private event details, OAuth tokens, or Google account information.
Attendez stores and processes Google Calendar integration data on its own application systems, including its self-managed database and application server. Our application server is hosted on third-party cloud/VPS infrastructure. The infrastructure provider does not receive Google Calendar data for its own use and is not permitted to access or use Google user data except as necessary to provide secure hosting infrastructure.
We may disclose Google user data only if required by law, regulation, legal process, government request, or where necessary to protect the security, rights, or safety of Attendez, our users, venue owners, or the public.

Attendez does not use Google Calendar data for advertising, user profiling, marketing, or unrelated purposes.

Data Protection and Security Mechanisms
We apply reasonable technical and organisational safeguards to protect Google user data, including sensitive Google Calendar data.
Our data protection measures include:

Secure authorisation using OAuth - Google Calendar access is obtained only through Google OAuth authorization. Users can revoke access at any time from their Google Account permissions.
Limited access - Access to Google Calendar data is limited to the minimum required for turf availability, booking, scheduling, and calendar management features.
Encryption and secure storage - OAuth tokens, calendar identifiers, booking records, and related integration data are stored securely. Sensitive credentials and tokens are protected using appropriate security controls such as encryption, restricted access, and secure server-side storage.
Access control - Internal access to Google user data is restricted to authorized personnel only when required for support, troubleshooting, security, or platform operations.
Data minimization - We only collect and store Google Calendar data required to provide the booking and availability features. We do not collect or store unrelated Google Calendar event details unless required for the functioning of the booking service.
Secure transmission - Data transmitted between users, Attendez, Google APIs, and our servers is protected using secure communication protocols such as HTTPS.
Monitoring and protection against unauthorized access - We use reasonable safeguards to help prevent unauthorized access, misuse, alteration, or disclosure of Google user data.
Revocation and deletion - When a turf owner disconnects Google Calendar or revokes OAuth access, Attendez stops accessing Google Calendar data. Users may request deletion of stored Google Calendar integration data, subject to legal, security, accounting, or dispute-resolution requirements.

ChatGPT App / Attendez MCP Integration

If you connect Attendez to ChatGPT, we may process information needed to answer your requests and operate the integration, including your connected Attendez account, venue access, tool requests, tool responses, booking and revenue analytics, coupon and pricing actions, timestamps, IP-based request metadata, and audit logs.

We use this data to authenticate you, enforce venue-level permissions, answer your Attendez-related questions, perform approved actions, prevent abuse, debug issues, and maintain security.

We do not use ChatGPT app data to access venues that are not assigned to your Attendez account. Write actions such as coupon creation or pricing updates require your authorization and are logged.

Retention/audit logs: We may retain audit logs for security, compliance, troubleshooting, and fraud prevention.