Privacy policy

Effective November 9, 2026

Davby is an online scheduling service. It lets professionals (“hosts”) share a booking page, and lets the people they meet (“clients”) book time with them. This policy explains what information Davby collects, how it's used and shared, and the choices you have. Davby is operated by Bennett Liu in the United States. Questions go to support@davby.com.

Information we collect

From hosts

• Account details: your email address, and anything you add to your profile, such as your name, firm, website, phone number and photo.
• Your settings: meeting types, working hours, booking rules and the text of your emails.
• Calendar connections: if you connect Google Calendar, Microsoft or Zoom, we store the access tokens those services give us, encrypted.
• Calendar information: for the calendars you choose to check, the start and end times, busy or free status and titles of events, as described below.

From clients who book

• Your name, email address, time zone and preferred language, and anything else the host asks for, such as a phone number, answers to questions, or guests' email addresses.

Automatically

• A single cookie that keeps hosts signed in. We don't use advertising or tracking cookies.
• Basic technical information, such as IP addresses, used briefly to limit abuse and keep the service secure.

How we use Google user data

If you connect Google Calendar, Davby asks for these permissions, and uses them only for the features described:

• View and edit events on your calendars (calendar.events): to find when you're busy on the calendars you choose, so clients are only offered times you're free; to check again at the moment someone books; to add each booking to the calendar you choose, with a Google Meet link if you selected one; to update or remove that event when the booking is moved or cancelled; and to notice when you move or delete an event Davby created, so the booking stays in step.
• See the list of your calendars (calendar.calendarlist.readonly): so you can choose which calendars to check for conflicts and which one gets new bookings.
• Your email address and basic profile (openid, email): to sign you in, if you choose to sign in with Google.

We store event times and titles for the calendars you choose to check, for roughly the next four months, so we can show you why a time isn't offered. Only you see them. Clients never see your event titles or details, only which times are open. We refresh this information regularly and replace it each time.

Specifically, we use Google user data only to provide and improve the features you use in Davby. We don't sell it, use it for advertising, use it to determine credit-worthiness or for lending, or transfer it to anyone except as needed to provide the service, for security, or to comply with law. We don't use Google user data to develop, improve or train generalized artificial intelligence or machine learning models. No person reads your Google data unless you ask us to (for example, for support), it's needed for security or to investigate abuse, or the law requires it.

How we use other information

• To run the service: show booking pages, take and manage bookings, and send confirmations, reminders and updates to hosts, clients and guests.
• To keep it secure and working: prevent abuse and double bookings, fix problems, and answer support requests.
• To tell hosts about their account: for example, if a calendar disconnects.

We don't send marketing email to clients.

How information is shared

• Between hosts and clients: a client's booking details go to the host they booked. A host's name, firm and contact details appear on their booking page and in emails.
• Service providers that run Davby for us, under contracts that limit their use of the information: Amazon Web Services (hosting, database and email delivery).
• Services you connect: Google, Microsoft or Zoom, to create and update events and meeting links you've asked for.
• When required: to comply with law, enforce our terms, or protect anyone's rights or safety.

We don't sell personal information.

Security

Information travels over encrypted connections (HTTPS). Calendar access tokens are encrypted when stored, and each host's data is kept separate from everyone else's in our database. Access to production systems is limited to the operator. No system is perfectly secure, so please contact us at once if you suspect a problem.

Keeping and deleting information

• Disconnecting a calendar in Settings revokes Davby's access and deletes the tokens and calendar information stored from it. You can also remove access at any time from your Google Account permissions page.
• Deleting your account in Settings deletes your account, settings, bookings and connections right away. Copies in our backups are removed within 30 days.
• Otherwise, we keep information for as long as the host's account is open.
• Clients who want their information changed or removed can ask the host they booked with, or write to support@davby.com and we'll help.

You can download everything in your account at any time from Settings.

Your choices and rights

You can see and change your information in the app, download it, or delete it. Depending on where you live, you may have further rights, such as to ask for a copy of your information or to object to how it's used. Write to support@davby.com and we'll respond within 30 days.

Sensitive information

Davby isn't designed for health information, Social Security numbers, financial account numbers or tax documents. Please don't ask for them in booking questions or include them in bookings.

Children

Davby isn't meant for anyone under 16, and we don't knowingly collect their information.

Where information is stored

Davby stores information in the United States.

Changes to this policy

If we change this policy, we'll update the date above, and tell hosts by email before any change that affects how we use their information.

Contact

Bennett Liu, operator of Davby: support@davby.com