Privacy Policy

1. Types of Data Collected

• Personal data provided by the user (e.g., name, email)
• Usage data collected automatically (e.g., pages visited, actions taken)

2. Data Collected from Google

When you connect your Google account, we access only the specific data necessary for our scheduling features:

• Calendar availability (“busy”/“free”) via https://www.googleapis.com/auth/calendar.freebusy
• Calendar event metadata (titles, times, attendees, locations) via https://www.googleapis.com/auth/calendar.events

3. Data Collected from Social Media & Third‑Party Logins

When you choose to log in or connect via a social provider, we request only the minimum scopes needed to identify you and surface basic profile data.

¹ We do not post or read private tweets. ² ORCID integration uses their public API without OAuth, limited to user‑provided iD.

4. How We Use Your Google Data

• Availability checks: We call the Free/Busy endpoint to gray-out occupied slots in our scheduler UI, preventing double-booking without exposing any event details.
• Event synchronization: We read your existing events so our app mirrors your schedule.
• Event management: We create, update, and delete events when you book, reschedule, or cancel webinars/meetings in OTS Academy.
• Meet link generation: We include conferenceData.createRequest in our API calls so Google automatically generates and attaches a Meet URL to newly created events.
• Periodic sync: We periodically call the Calendar API to fetch updates made directly in Google Calendar, ensuring both calendars stay in sync.

5. Data Sharing with Third Parties

OTS Academy (BackPact Ltd) does not and will not sell, rent, or share any Google user data with any third parties.

All processing of your Google Calendar data is handled exclusively by our internal systems and authorized personnel at OTS Academy (BackPact Ltd) to provide and improve the scheduling features of our application as described in this policy. We do not transfer your data to any external services or partners.

The only exception to this policy is if we are required to disclose information by law, such as in response to a valid subpoena, court order, or other legal process, or to protect our rights, property, and safety, or the rights, property, and safety of our users or the public.

6. Data Processing and Security

• We implement appropriate technical and organizational security measures to protect the data we process.
• Access to data is strictly limited to authorized BackPact Ltd employees who require it to perform their job functions.
• Our legal basis for processing data includes user consent, contractual necessity, legal obligations, and legitimate interests.

7. Data Retention

• We store personal data only as long as necessary to fulfill its purpose.
• Retention periods may be extended if required by law or with user consent.

8. User Rights

• Withdraw consent
• Object to processing
• Access and rectify data
• Restrict processing
• Request deletion
• Receive data in a portable format
• Lodge complaints with authorities

9. Exercising User Rights

Contact OTS Academy (BackPact Ltd) at admin@ontourism.academy. Requests are addressed within one month, free of charge.

10. Additional Information

• Personal data may be used for legal purposes or disclosed to authorities if required, as outlined in our data sharing policy.
• The app may provide additional details about specific services or data collection upon request.
• The app does not support "Do Not Track" requests.

11. Policy Updates

We will notify users of changes to this policy on this page or via provided contact information.