Privacy Policy

Information the service collects

Account holders provide an email address, business or analyst name, timezone, language, and booking-page settings. Guests provide a name, email address, selected appointment time, and any note they choose to include.

The service also processes appointment details, service settings, and security data needed to operate the booking flow. This includes signed session cookies, short-lived sign-in codes, and Turnstile verification used to prevent abuse.

Analytics

ColorPaletteAnalysis Booking uses PostHog, a product analytics service, on its account sign-in, setup, and dashboard pages to understand usage and record on-page interactions for troubleshooting and improvement. Session recordings mask the contents of form fields, so typed input is not captured in a recording.

The guest-facing booking widget at book.colorpaletteanalysis.com/book/ and the embedded version placed on an analyst's own website do not load this analytics service.

Analytics data is not used for advertising, is not sold, and is not combined with data from unrelated services.

Connected Google and Microsoft calendars

An account holder may choose to connect Google Calendar or Microsoft Outlook. The connection lets ColorPaletteAnalysis Booking list calendars the account can use, check whether a proposed appointment time is busy, and create booking events in the calendar selected by the account holder.

For a connected calendar, the service stores the connected account email, selected calendar identifiers, permitted scopes, and an encrypted refresh token. It does not store a Google or Microsoft password. It uses busy-time information to avoid scheduling conflicts. It does not use calendar data for advertising, sell it, or use it to build profiles unrelated to the booking service.

ColorPaletteAnalysis Booking's use of Google user data follows the Google API Services User Data Policy, including the Limited Use requirements.

How sensitive data is protected

Data sent between a browser, ColorPaletteAnalysis Booking, and connected calendar providers is transmitted over HTTPS. Calendar refresh tokens are encrypted before they are stored using AES-256-GCM, an authenticated encryption method. The encryption key is kept in a separate Worker secret and is not stored with the token.

Calendar connections use OAuth 2.0 with PKCE and a random state value. The state value is stored only as a hash and expires after 10 minutes. OAuth access tokens are used only to complete the current calendar request and are not stored in the booking database.

Account sessions use signed, Secure, HttpOnly cookies with SameSite protections. Sign-in requires a short-lived code delivered to the account email address. Turnstile verification helps protect sign-in and booking forms from automated abuse.

How information is used and shared

Information is used to authenticate account holders, display availability, reserve appointments, send booking emails, create calendar events, prevent fraud, and maintain the service.

A guest's booking details are shared with the analyst or business whose page the guest used. When a calendar is connected, the booking event is also sent to the calendar provider selected by that analyst or business. Service providers that host the app, deliver email, prevent abuse, or operate a connected calendar may process information only to provide their service.

Your choices

Account holders can stop a calendar connection by revoking ColorPalette Booking's access in Google or Microsoft and can ask for connection or account data to be deleted. Guests can ask the analyst or business they booked with to update or cancel an appointment.

To request access, correction, or deletion of data held by ColorPaletteAnalysis Booking, email bookings@book.colorpaletteanalysis.com. Include the email address connected to the request so it can be located safely.

Retention and security

Information is kept while an account or booking record is needed to run the service, meet legal obligations, resolve disputes, or enforce agreements. A calendar connection can be revoked through Google or Microsoft, and connection or account data can be deleted on request. No method of transmission or storage is completely secure, so no system can promise absolute security.

Children and policy updates

ColorPalette Booking is not directed to children. Do not use the service to submit a child's personal information without appropriate authority.

This policy may change as the service changes. The current version will remain on this page with its updated date.