Privacy Policy for Schedufast

Effective Date: October 04, 2025

Last Updated: October 04, 2025

1. Introduction

Welcome to Schedufast ("we," "us," or "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

This policy is designed to be compliant with relevant privacy regulations and to be transparent about our data practices, especially concerning the information we access via Google APIs.

By using Schedufast, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect a limited amount of information necessary to provide and improve our service.

a. Information You Provide via Google

When you grant Schedufast access to your Google account, we access the following information:

  • Google Calendar Data: We request permission to access your Google Calendar using the https://www.googleapis.com/auth/calendar scope. This allows our service to create, view, and manage calendar events and calendars on your behalf. This is essential for our core feature, which is to parse your timetable and populate your Google Calendar with your classes and other events.
  • Google Authentication Tokens: To maintain a connection with your Google account, we securely store your OAuth2 access and refresh tokens. We do not store your Google password.

b. Information from Third-Party Services

  • Payment Information: We use Paystack to process payments. We do not collect or store your full payment card details. This information is provided directly to Paystack, whose use of your personal information is governed by their privacy policy.

c. Automatically Collected Information

  • Cookies: We use strictly necessary cookies for session management and to maintain your logged-in state. These cookies are essential for the basic functionality of our website. We do not use cookies for tracking, analytics, or advertising purposes.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To Provide Our Core Service: The primary use of your Google Calendar data is to parse your uploaded timetable and automatically create calendar events for your classes, exams, and other scheduled activities.
  • To Manage Your Account: To create and manage your Schedufast account and provide you with customer support.
  • To Process Transactions: To facilitate and process payments for our services via Paystack.

4. Google API Services User Data Policy

Schedufast's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • We only use the access granted to your Google Calendar to provide and improve our user-facing feature: the automated creation of calendar events from your timetable.
  • We do not transfer your Google user data to others unless it is necessary to provide or improve our core feature, to comply with applicable laws, or as part of a merger, acquisition, or sale of assets.
  • We do not use your Google user data for serving advertisements.
  • We do not allow humans to read your data unless we have your affirmative agreement for specific messages, it is necessary for security purposes such as investigating abuse, to comply with applicable law, or for our internal operations.

5. How We Share Your Information

We do not sell or rent your personal information. We may share your information only in the following limited circumstances:

  • With Service Providers: We share information with third-party vendors who perform services for us.
    • Google: For user authentication and providing access to the Google Calendar API.
    • Paystack: For processing payments.
  • For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

6. Data Security and Retention

We use administrative, technical, and physical security measures to help protect your personal information. All Google tokens are stored securely and encrypted.

We retain your personal data only for as long as your account is active with us. Upon receiving an account deletion request, we will immediately and permanently delete all of your associated data from our databases, including your Google tokens and any payment records.

7. International Data Transfers

Our service is operated from South Africa. Our frontend servers are located in Ohio, USA, and our backend servers are located in Frankfurt, Germany. By using our service, you consent to your information being transferred to, stored, and processed in these countries, which may have data protection laws that are different from those in your country. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

8. Your Rights and Choices

You have control over your personal information. You can manage your account information directly through the Schedufast application.

You have the right to request the deletion of your account and all associated data at any time. To do so, please send a request to the contact email provided below.

9. Children's Privacy

Our service is not intended for or directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information from our files immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Email: support@schedufast.co.za