Privacy Policy

Last updated 18 July 2026

Who we are

Slots Picker is a calendar-availability add-in for Microsoft Outlook, operated by Slots Picker Ltd ("we", "us", "our"), a company registered in England and Wales (company number 17348053), with its registered office at Unit A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom. We are the data controller for the personal data described in this policy. You can reach us any time at support@slotspicker.app.

The short version

Slots Picker is built to be zero-knowledge about your calendars. Your executives' calendar contents are read only within your active session to show who is free, and are never stored on our servers and never seen by our staff. We keep only what we need to run your account: who you are, your subscription status, your settings, and referral records.

The personal data we collect

If you join the waitlist: your email address, which product you use (Outlook or Gmail), and your consent choices (with a timestamp).

If you use the add-in:

• Account identity from your Microsoft sign-in (your name and email).
• Your subscription and trial status.
• Your settings (display timezone, working hours, slot size, colours, email templates).
• Referral records (your referral code and the referrals you generate).

Your calendar data: to show availability, the add-in reads calendar events directly from Microsoft Graph into your active session. This data never passes through, nor is stored on, Slots Picker's own servers, and no Slots Picker staff can access it. Our Microsoft Graph access is strictly read-only, limited to the "User.Read" and "Calendars.Read.Shared" scopes, so we cannot create, alter, delete, or place holds on any calendar. We also do not read event categories.

Technical data: we keep minimal operational logs, and for the waitlist form we store a one-way hashed version of your IP address (never the raw address) purely to prevent abuse.

How and why we use it

• To provide the Service and run your account, which is necessary to perform our contract with you.
• To keep the Service secure and working (for example, abuse prevention and refreshing access tokens), which is in our legitimate interests.
• To email you about the launch and, if you opted in, occasional product updates, based on your consent.
• To take payment and keep proper records, to perform our contract and meet our legal obligations.

We do not use your personal data for automated decision-making or profiling.

Who processes your data

We use a small set of trusted providers who process data only on our instructions, under data-processing agreements. We do not sell your personal data.

• Microsoft: sign-in and read-only calendar access (Microsoft Graph).
• Supabase: stores your account, subscription status, settings, referral records, and waitlist sign-ups, and provides authentication.
• Vercel: hosts the website and its serverless endpoints.
• Stripe: processes subscription payments (we never see your card details).
• Cloudflare (Turnstile): protects the waitlist form from abuse.
• Resend: sends referral notification emails.

International transfers

Some of these providers process data outside the UK and EEA, including in the United States. Where they do, we rely on appropriate safeguards: the UK Extension to the EU-US Data Privacy Framework where the provider is certified, otherwise the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses.

How long we keep it

• Account data: kept while your account is active, then deleted or anonymised within 30 days of account closure.
• Financial and transaction records (handled by Stripe): kept for as long as UK tax law requires, currently at least 6 years, to meet our HMRC obligations.
• Waitlist data: until launch, or until you ask to be removed.
• Calendar contents: not retained. They are processed only within your session and never stored.

To close your account and have your data deleted, email support@slotspicker.app.

Your rights

You have the right to access, correct, delete, restrict, or port your data, to object to certain processing, and to withdraw consent at any time. To exercise any of these, email support@slotspicker.app. If you are in the UK or EEA and have a concern, you can also complain to the Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

Cookies and storage

We do not use advertising or tracking cookies. We rely only on "strictly necessary" local and session storage to remember your settings and your region for pricing, and an essential security token from Cloudflare Turnstile to protect the waitlist form from bots. Because these are strictly necessary to provide the service you asked for, they do not require consent under UK PECR.

Changes

We may update this policy and will change the date above when we do. We will tell you about material changes where appropriate.

Contact

Slots Picker Ltd, Unit A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom. Email support@slotspicker.app.