Privacy Policy

wfm (“works for me”, accessible at wfm.bot) is operated by Corner Pocket Holdings LLC (“we”, “us”). wfm helps two people find a meeting time from a link shared in a text thread. This policy describes what we collect, why, and the choices you have. The short version: we collect the minimum needed to book a meeting, we only ever read free/busy availability from a connected guest calendar, and we never sell your data.

Information we collect

Organizers (people who create scheduling links) sign in with Google. We receive your name, email address, and profile photo, and — with your consent — access to create events on your Google Calendar and read your free/busy availability. We also store the scheduling preferences you set (working hours, buffers, default meeting lengths).

Guests (people who receive a link) can book with nothing but an email address, which we use to send the calendar invitation. If a guest chooses to connect their calendar, we request Google's narrowest availability-only permission (calendar.freebusy): it tells us when you are busy, and nothing else. Event titles, descriptions, attendees, and locations are never visible to us.

How we use Google user data

We use calendar access solely to (a) compute available meeting times inside the window an organizer chose, and (b) create the booked event on the organizer's calendar with the guest as an attendee. wfm's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except with your consent, for security purposes, or as required by law.

Storage and security

OAuth tokens are encrypted at rest with AES-256-GCM. Free/busy data is fetched on demand to rank candidate times and is not retained after the request completes. Bookings (time, title, participant emails) are stored so both sides can revisit their confirmation.

Sharing

We share data only with the service providers that run wfm (hosting and database infrastructure) and with Google, to create the events you asked us to create. We do not sell or rent personal information to anyone.

Retention and deletion

You can disconnect a connected calendar at any time, which revokes our access; you can also revoke it from your Google Account permissions page. To delete your account and associated data, email privacy@wfm.bot and we will remove it within 30 days.

Children

wfm is not directed at children under 13, and we do not knowingly collect their information.

Changes

If we make material changes to this policy we will update this page and adjust the date above. Questions? privacy@wfm.bot.