Privacy Policy

1. Who we are

FREIGABE is operated by SAILBAHN GmbH, registered in Austria. We provide a calendar synchronization service that helps users manage availability across multiple Google and Microsoft calendar accounts.

2. What data we collect

When you use FREIGABE, we collect:

• Your email address and name (from sign-in via email, Google, or Microsoft)
• OAuth refresh tokens for your connected calendar accounts (encrypted at rest using AES-256-GCM)
• Calendar metadata: calendar names, timezone, and primary status
• Event time blocks (start/end times and busy status) and a one-way hash for change detection. We never store event titles, descriptions, attendees, locations, or any other event content. Calendar data is read from the source, processed in memory to create blocker events, and written directly to the target — it passes through our service but is not persisted.

3. How we use your data

We use your data solely to provide the calendar sync service. FREIGABE reads your calendar events, determines when you are busy, and creates privacy-safe blocker events on your other calendars. We do not sell, share, or use your data for advertising.

4. Data storage and security

Account credentials are stored in Supabase (PostgreSQL) with row-level security policies. OAuth tokens are encrypted using AES-256-GCM before storage. The service is hosted on Google Cloud Run in the EU (europe-west1).

5. Third-party services

We use Google Identity Platform (Firebase Auth) for sign-in, and Google Calendar API and Microsoft Graph API to read and write calendar events on your behalf. These interactions are governed by their respective privacy policies.

6. Your rights

You can disconnect any calendar account at any time, which stops syncing and removes associated blocker events. You can delete your account entirely by contacting us. Under GDPR, you have the right to access, rectify, or erase your personal data.

7. Contact

For privacy questions, contact us at info@sailbahn.dev.