Perelepituse planeerija Privacy Policy

Last updated: February 22, 2026

1. Service and Data Controller

Perelepituse planeerija is an invite-only case management service operated by Kevin Mandmets (Estonia). The service is not open for self-signup; access is limited to approved users.

Data controller contact: mandmetskevin@gmail.com.

2. Data We Process

We process personal data entered by authorized users for case management, including:

Client contact data (name, email address, phone number).
Case and meeting data (date/time, duration, location, status, notes).
Operational metadata (timestamps, audit-style records, integration status).

3. Google Calendar Data and OAuth Scope

Authorized users may connect a Google account to enable calendar scheduling features. The application requests https://www.googleapis.com/auth/calendar.

When connected, the application can:

Read the user's calendar list to support calendar selection.
Read calendar events required for conflict checks and calendar display.
Create, update, and delete Google Calendar events for meetings managed in this service.

Google Calendar data is used only to provide scheduling features in this application. We do not sell Google user data and we do not use Google data for advertising.

4. Third-Party Processors

Google (Calendar API): calendar synchronization and conflict checking.
Textmagic: SMS reminder and notification delivery to stored phone numbers.

5. Legal Basis and Purpose

Data is processed for legitimate operational purposes: case management, meeting scheduling, communication, and service security. Users are responsible for entering and handling client data in accordance with applicable law.

6. Sharing

We do not sell personal data. Data is shared only with service providers needed to operate the product (as listed above) or when required by law.

7. Retention

Case and client data: retained while a case is active and for up to 7 years after case closure, unless longer retention is legally required.
Google OAuth credentials/tokens: retained only while integration is active; removed when the user disconnects Google Calendar, when credentials become invalid, or after a verified deletion request.
Operational logs: retained up to 12 months unless needed longer for security or legal obligations.

8. Security

Access is restricted to authenticated authorized users. Google OAuth tokens are stored in encrypted form, and we apply standard technical controls to protect stored data.

9. Revocation and Deletion Requests

Users can revoke Google access at any time via myaccount.google.com/permissions and can disconnect Google Calendar inside the application.

For account or data deletion requests, contact mandmetskevin@gmail.com. Verified requests are processed within 30 days unless law requires retention.

10. Contact

Privacy questions: mandmetskevin@gmail.com.