Privacy policy

Linemerge ("Linemerge", "we", "us") is a scheduling service operated by Nameverse Inc. that merges the calendars from your multiple accounts and phones into one availability and offers a booking page on top of it. This policy explains what data we collect, why, how we protect it, and how you can export or delete it. It applies to the Linemerge website (linemerge.com), web application, and mobile applications.

The short version: we collect the minimum calendar data needed to compute your availability, we never store the contents of events on calendars you mark private, we encrypt what we do store, and we never sell your data or use it for advertising.

1. Information we collect

Account information

Your name, email address, and password (stored as a salted hash), or your sign-in identity if you sign in with Google or Microsoft.
Settings you configure: booking pages, event types, working hours, per-calendar names ("source tags"), and per-calendar privacy choices.
Billing details, processed by Stripe. We never see or store full card numbers.

Calendar data (Google Calendar and Microsoft 365 / Outlook)

When you connect a calendar account via OAuth, we access your calendar list and event data from that account in order to compute your merged availability and to create events for confirmed bookings. What we store depends on the privacy setting you choose per calendar:

Private calendars (the default posture): we store only free/busy intervals — the start and end times of events and whether they block your availability. Event titles, descriptions, attendees, and locations from private calendars are never written to our database.
Public calendars (opt-in, per calendar): we additionally store event titles and details so they can be displayed where you choose (for example, on your unified calendar view).

We also store the OAuth tokens needed to keep your calendars in sync (encrypted at rest — see Security) and provider event identifiers used to keep the sync accurate and duplicate-free.

Device calendar data (mobile apps)

If you enable the optional Device Bridge in our mobile apps, the app reads your phone's local calendar store (with the operating-system permission you grant) and uploads availability snapshots. The same minimization rules apply: calendars treated as private contribute busy intervals only.

Booking data

When someone books time with you, we collect the information they submit on your booking page (name, email, and answers to any questions you configure) so we can create the event, send confirmations, and let them reschedule or cancel.

Usage data

We collect standard technical logs (IP address, browser type, pages visited) for security and reliability, and privacy-respecting, self-hosted product analytics. We do not use third-party advertising trackers.

2. Google user data: Limited Use disclosure

Linemerge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We only use Google Calendar data to provide and improve the user-facing features you see in Linemerge: computing your merged availability, displaying your unified calendar, and creating/updating events for bookings you approve.
We do not transfer Google user data to third parties except as necessary to provide these features, to comply with applicable law, or as part of a merger or acquisition with prior notice to you.
We do not use Google user data for advertising, and we do not sell it to data brokers or information resellers.
Humans do not read your Google Calendar data, except (a) with your explicit permission (for example, a support request), (b) as required for security or to comply with applicable law, or (c) in aggregated, anonymized form for internal operations.
We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine-learning models.

We request the narrowest Google OAuth scopes that make the product work, and you can review or revoke Linemerge's access at any time at myaccount.google.com/permissions. Microsoft 365 calendar data is handled under the same principles, and access can be revoked from your Microsoft account settings.

3. How we use your information

Compute and display your merged availability across connected calendars.
Operate your booking pages and write confirmed bookings to the calendar you designate.
Send transactional email you'd expect: booking requests, confirmations, reminders, and account notices.
Process subscription payments (via Stripe).
Secure, debug, and improve the service.

We do not sell personal data, share it with advertisers, or use calendar contents for profiling or marketing.

We use a small number of processors to run Linemerge, each receiving only what they need:

Provider	Purpose	Data involved
Cloudflare	DNS, CDN, DDoS protection, object storage	Technical request data; stored files
Stripe	Subscription billing	Name, email, payment details
Resend	Transactional email delivery	Email address, message content
Twilio	Optional SMS reminders	Phone number, reminder text

Our servers are operated on infrastructure we manage. We may also disclose information if required by law, or in connection with a merger or acquisition (with notice to you).

5. Data retention

Synced calendar data is retained only while the calendar is connected and only within the window needed to compute availability.
Disconnecting a calendar deletes its mirrored data and tokens from our systems.
Deleting your account deletes your OAuth tokens, mirrored calendar data, booking pages, and personal information, except minimal records we must keep for legal or accounting reasons (e.g., invoices).
Backups are encrypted and expire on a rolling schedule.

6. Your rights: export, deletion, and access

Export: you can export your data (account settings, booking history, and stored calendar data) in a machine-readable format from your account settings, or by emailing us.
Deletion: you can delete your account in-app (including from the mobile apps) or by emailing us; deletion cascades to tokens and mirrored calendar data as described above.
Revocation: you can revoke Linemerge's access from your Google or Microsoft account at any time, independently of us.
Access & correction: you may request a copy of, or corrections to, the personal data we hold about you.

If you are in the EEA/UK, you may also have rights under the GDPR (including lodging a complaint with a supervisory authority); California residents have rights under the CCPA/CPRA. We honor these requests regardless of where you live. To exercise any right, email [email protected].

7. Security

OAuth tokens and stored event data are encrypted at rest, all traffic is encrypted in transit (TLS), access to production systems is restricted and audited, and private-calendar contents are excluded from our database by design. See our Security page for details. No system is perfectly secure; if a breach affects your data we will notify you promptly as required by law.

8. Children

Linemerge is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

9. Changes to this policy

We will post any changes on this page and update the date above. For material changes we will notify you by email or in-app before they take effect.

10. Contact

Questions, requests, or complaints: [email protected] — Nameverse Inc.