Privacy

What we collect and why.

This is the privacy policy of Vavilon Labs - the name shown on the Google consent screen. It covers three things: how the Vavilon Labs application handles Google user data, the products we build and run for businesses, and this website itself.

Google user data (Google Calendar)

Some of the products we build - including the Vavilon Labs booking system - connect to the Google Calendar of the business that runs them. This section describes that access in full.

Scopes we request. https://www.googleapis.com/auth/calendar and https://www.googleapis.com/auth/calendar.events. They are granted by the business owner or administrator through Google's own consent screen, for a calendar they own.

What we access. Busy/free times on the connected calendar, and the appointment events the app itself creates there - service, specialist, date, time, duration, and the contact details the client submitted when booking.

What we do with it. Four things only: check that a requested slot is free, create the appointment as an event in that calendar, update the event when the client reschedules, and delete it when the client cancels. Nothing else is read, exported or analysed.

Where it is stored. The OAuth tokens and the id of the connected calendar are stored encrypted on our own n8n automation server. Booking records are stored in the database of the specific business. Google Calendar data is not copied into any third-party CRM, marketing or analytics service.

What we never do. We do not sell Google user data, do not transfer it to third parties beyond what is needed to deliver the booking feature to that business, do not use it for advertising, and do not use it to train AI or machine-learning models. No human at Vavilon Labs reads calendar data except when the business asks us for support, or where required by law or to investigate a security incident.

Revoking access and deletion. The business can disconnect Vavilon Labs at any time at myaccount.google.com/permissions. On that action, or on a request to [email protected], we delete the stored tokens and calendar id within 30 days.

Limited Use. Vavilon Labs' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Products we build for businesses

Vavilon Labs builds custom automation for businesses - Telegram bots, websites, CRM systems, and booking/scheduling tools (including services such as bike rental booking, salon and service appointment booking, and similar).

What we collect. Depending on the specific product, this may include name, phone number, email, and booking or order details (service, date, time) submitted through a Telegram bot, website form, or CRM interface.

How we use it. Solely to operate the specific service you are interacting with - for example, to create and manage a booking, sync it to the business's calendar (via the Google Calendar API where applicable), or process a request through a CRM.

Sharing. We do not sell your data. It is shared only with the specific business you are interacting with, and with the third-party services required to deliver the feature - for example Google Calendar for scheduling and Telegram for messaging.

Retention. Data is retained as long as needed to provide the service and for the business's own record-keeping.

Your rights. Write to [email protected] - or [email protected] - to request access to or deletion of your data.

This website

Who processes your data

Vavilon Labs, an automation studio based in Kyiv, Ukraine. For any question about your data, write to [email protected].

What the form collects

When you send a request through the form on the main page, we receive:

• Type of business and number of specialists – the two answers you select
• The contact you leave: Telegram handle, email address or phone number
• Technical context sent automatically: page address, the site that referred you, interface language and the time of submission

Nothing else is collected. There is no hidden tracking of your behaviour on the page.

Why we need it

Only to reply to your request and prepare an estimate. We do not send newsletters, do not sell or pass your contact to third parties, and do not use it for advertising.

The legal basis is your consent, given by submitting the form.

Where it goes

The form sends the data to our own n8n automation server, which forwards a notification to our Telegram. The data is not stored in third-party CRM or marketing services.

How long we keep it

Up to 12 months from your request, or until you ask us to delete it – whichever comes first.

What the site stores in your browser

No advertising or tracking cookies. Two technical values only:

• vl-lang in localStorage – remembers whether you chose English or Ukrainian
• vl-lead-sent in sessionStorage – prevents the form being submitted twice, and disappears when you close the tab

Both stay in your browser and are never sent anywhere. Clearing site data removes them.

Analytics

The site may use a cookie-free analytics service that counts page views in aggregate. It does not receive your name, contact or any data from the form, and does not build a profile of you.

Your rights

You can ask us to show you the data we hold about you, correct it, or delete it entirely. Write to [email protected] – we reply within a business day and delete on request without asking for a reason.

Changes

If this policy changes, the date at the top of the page changes with it.