You were redirected to English. Revenir en français →

Appointment booking app: privacy policy

Last updated: September 28, 2026

Who we are. "Marc M · Rendez-vous" is published by Marc Muller, sole proprietor (SIRET 505 045 450 00069, France), who builds and hosts websites for his clients under the Marc M brand (marcm.fr). Contact: [email protected].

What the app does. It lets a professional whose website we manage (the "client") connect their Google, Microsoft 365 / Outlook or iCloud calendar to their website's booking page. It does only three things:

  1. check the busy/free periods of the client's calendar, so visitors are only offered truly available slots;
  2. create, update or delete, in the client's calendar, the appointments booked on their website, and only those;
  3. show the client their list of calendars, so they choose which ones to check and which one receives appointments.

Data we access.

  • Busy periods (start and end times only). We never read event titles, descriptions, locations or attendees.
  • Calendar list (name and ID).
  • The email address of the connected account (displayed in the client's dashboard).
  • Appointments created by the app, which we may update or delete when the visitor reschedules or cancels.

Scopes: Google calendar.freebusy, calendar.calendarlist.readonly, calendar.events.owned, openid, email. Microsoft Calendars.ReadWrite, offline_access, openid, email. iCloud/CalDAV: an app-specific password you create and can revoke at any time.

Storage and retention.

  • Access tokens: encrypted (AES-GCM) and stored with Cloudflare in the European Union, kept while the calendar is connected, then deleted and revoked on disconnection.
  • Busy periods: cached for at most 5 minutes.
  • Appointments booked on the website: kept by the client's website, 12 months after the appointment date by default.

We never sell, rent or transfer data. We never use calendar data for advertising, profiling or training AI models. No human reads calendar data except for security, legal obligations, or at the client's explicit request for support.

Limited Use. "Marc M · Rendez-vous" use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Processors: Cloudflare (hosting, database, EU), Scaleway (transactional emails, France), and your own calendar provider.

Your rights. Disconnect from your dashboard (Appointments > Calendar connection > Disconnect) or from your Google (myaccount.google.com/permissions) or Microsoft (myapps.microsoft.com) security settings. For access, correction or deletion, write to [email protected] (answer within one month). You may lodge a complaint with the CNIL (France).

See also the app terms of use and the marcm.fr privacy policy.