Privacy Policy
This page explains what we collect, why we collect it, and what you can ask us to do about it. We have written it in plain English on purpose.
Last updated: November 1, 2026
What we collect
On this website, we only collect what you type into our forms, plus a little basic technical information.
If you book an appointment with us, our scheduling service, Bulletproof Scheduling, collects the booking details described in the Bulletproof Scheduling sections below.
- Your name and email address.
- Your company name and job role, if you enter them.
- Your website address, if you enter it.
- What you tell us about your automation: the platform, the stage it is at, what it does, and what would happen if it broke.
- Any file you choose to upload, such as a workflow export or a screenshot.
- Anything you write in a message box.
- Your browser type and version. This helps us fix display problems.
We do not ask for payment card numbers on this website. We do not collect health information, government ID numbers, or any other sensitive personal data.
Why we collect it
We use your information for these things, and nothing else.
- To reply to you and answer your question.
- To carry out the QA review you asked for.
- To send you the sample report or training updates, if you asked for those.
- To schedule and manage any appointment you book through Bulletproof Scheduling.
We do not sell your information. We do not rent it. We do not share it with advertisers.
Our legal reason for using your data
If you live in the UK or the European Union, the law says we must tell you our legal reason for using your data.
When you fill in a form, you are asking us to contact you. That is our legal reason, and it is called consent. You can take that consent back at any time by emailing us.
We also have a legitimate interest in keeping records of the work we do, so we can stand behind our reviews later.
Who else sees your information
We use a small number of trusted companies to run this website and send our email. They only see what they need to do their job.
- Supabase — stores form submissions and uploaded files in a private database.
- Cloudflare — hosts the website and protects it from attacks.
- Mailgun — delivers our email.
- n8n — runs the automated workflow that sends you the sample report.
Some of these companies may store data outside your country, including in the United States. They are all required by contract to protect your information.
How long we keep it
We keep form submissions for up to 24 months. After that we delete them.
We keep files you upload for up to 12 months, so we can finish your review and answer follow-up questions.
If you become a client, we keep the records tied to your review for up to 7 years. Some of that is required for tax and business records.
Bulletproof Scheduling booking records are kept as described in “Deleting scheduling information” below.
You can ask us to delete your information sooner. See the next section.
Your rights
You are in control of your information. You can ask us to do any of the following.
- Show you a copy of what we hold about you.
- Correct anything that is wrong.
- Delete your information.
- Stop using your information for a while.
- Send your information to you in a file you can reuse.
- Stop emailing you.
Email us and we will reply within 30 days. We will not charge you, and we will not treat you differently for asking.
If you live in the UK or the European Union and you think we handled your data badly, you can complain to your national data protection authority.
How we protect your information
The whole website runs over an encrypted connection. Your form answers are stored in a private database that the public cannot read.
Files you upload go into private storage. They are not published on the web and cannot be reached by guessing a link.
No system is perfect. If a breach ever affects your personal information, we will tell you and the relevant authority within 72 hours.
Bulletproof Scheduling and Google Calendar
Bulletproof Scheduling is the online booking service operated by Bulletproof Automation QA at book.bulletproofautomations.com. Customers use it to book appointments with us. We use it to publish our availability, prevent double bookings, and keep our calendar up to date as appointments are made, moved, or cancelled.
Bulletproof Scheduling is our own customised installation of Calnode, an open-source scheduling program. It runs on a server we rent and control. It is not a service provided by the Calnode project.
Only members of our team connect a Google account to Bulletproof Scheduling. Customers who book an appointment do not sign in with Google and do not give the service access to their own Google account or calendar.
What Google data Bulletproof Scheduling can access
When a member of our team connects a Google Calendar, Google asks them to approve this permission: “See, edit, share, and permanently delete all the calendars you can access using Google Calendar” (https://www.googleapis.com/auth/calendar). That is a broad permission. It technically allows the service to read and change any calendar that Google account can reach. Below is what the service actually does with it, which is much narrower.
- The list of calendars in the account (each calendar's name and ID), so we can choose which calendars to check for conflicts and which calendar new bookings go into.
- The account's email address, read from its primary calendar, to label the connection.
- Free/busy information for the calendars we select: only the start and end times of busy periods. A free/busy check does not return event titles, descriptions, locations, or attendees.
- The calendar events that Bulletproof Scheduling itself creates for bookings.
- The access and refresh tokens Google issues, which let the service make these requests.
Bulletproof Scheduling does not read the titles, descriptions, attendees, or contents of other events in the calendar. It does not access Gmail, Google Drive, or Google Contacts.
Our staff can also sign in to the Bulletproof Scheduling administration area with Google. That sign-in asks only for basic profile information, and the service keeps the staff member's name and email address to identify them.
How we use Google Calendar data
- To check availability, so the booking page only offers times when we are free.
- To prevent double bookings, by checking the selected calendars again when an appointment is made.
- To create a calendar event for each booking. The event contains the appointment type, the customer's name, a booking reference, the time, and the meeting location. The customer is added as a guest, so Google sends them the calendar invitation. For a Google Meet appointment, Google creates the Meet link.
- To move that event when an appointment is rescheduled, and to delete it when an appointment is cancelled.
Busy times are used at the moment of the check and are not stored. The service stores the encrypted tokens, the names and IDs of the calendars we selected, and the IDs of the events it created, so it can update or remove them later.
Information collected when you book an appointment
- Your name and email address.
- The appointment you chose, its date and time, and your time zone and language.
- Your phone number, if you choose a phone call as the meeting type.
- Your answers to any questions on the booking form.
- The meeting location or link for the appointment.
- Whether the appointment is confirmed, rescheduled, or cancelled, and your reply to the calendar invitation where it is available.
- For paid appointments, the payment status, amount, currency, and the payment provider's transaction reference. We never receive or store card numbers.
Like any website, the systems that deliver Bulletproof Scheduling process technical information such as your IP address and browser details, in order to deliver pages and protect the service from abuse.
Where scheduling data is stored and how it is protected
Bulletproof Scheduling stores its data in a database on a server we rent from Netcup GmbH in Germany. Access to that server is restricted to our administrators.
Google access and refresh tokens, and other credentials such as payment and email provider keys, are encrypted with AES-256-GCM before they are saved, using a key that is kept outside the database. Booking records themselves are not stored with this extra layer of encryption; they are protected by the server's access controls.
All traffic to Bulletproof Scheduling is encrypted in transit (HTTPS). The administration area requires staff to sign in, and sign-in cookies are marked Secure and HttpOnly.
We keep backup copies of the database on the same server, accessible only to our administrators.
No system is perfect. The breach-notification commitment in “How we protect your information” above applies to Bulletproof Scheduling too.
Services that support Bulletproof Scheduling
Bulletproof Scheduling shares information with the following services only as needed to provide scheduling.
- Google (Google Calendar and Google Meet): receives the calendar event for each booking, including the customer's name and email address as a guest, and sends the customer Google's calendar invitation.
- Netcup GmbH (Germany): hosts the server where Bulletproof Scheduling and its database run.
- Cloudflare: carries all traffic to and from book.bulletproofautomations.com and protects the service from attacks. It processes requests, including IP addresses, in order to deliver them.
- An email delivery provider, if we switch on booking emails such as confirmations and reminders. It would receive the recipient's name, email address, and the appointment details in the message. We will name that provider in this policy before booking emails are switched on.
- Stripe or Paystack, for paid appointments only. See “Payments for paid appointments” below.
We do not sell scheduling information, and we do not share it with advertisers.
Google API Services User Data Policy and Limited Use
Bulletproof Scheduling's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice, this means:
- We use Google user data only to provide and improve the scheduling features described above, which are visible to the person who connected their calendar.
- We do not transfer Google user data to others except as needed to provide those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.
- We do not use Google user data for advertising, and we do not sell it.
- We do not use Google user data to develop, improve, or train artificial intelligence or machine-learning models.
- People do not read Google user data unless the user has given permission for specific data, it is necessary for security purposes such as investigating abuse, it is needed to comply with the law, or the data has been aggregated and anonymised for internal operations.
Disconnecting Google Calendar and revoking access
A staff member can disconnect their Google Calendar inside Bulletproof Scheduling at any time. This deletes the stored Google tokens and the connection from our database, and the service stops checking or changing that calendar.
Disconnecting inside Bulletproof Scheduling does not by itself withdraw the permission at Google. To do that, open your Google Account, go to “Your connections to third-party apps & services”, choose Bulletproof Scheduling, and remove its access.
Calendar events already created for bookings stay in the calendar until you delete them.
Deleting scheduling information
Bulletproof Scheduling does not automatically delete booking records after a set period. We keep them while they are needed to run our appointments and keep business records.
You can ask us to delete your booking information. A staff member can ask us to delete their account and stored Google data. Email info@bulletproofautomations.com with “Privacy” in the subject line. We will delete the information we are not required to keep, and tell you if anything has to be kept and why. Deletion is done by our administrators, and we will reply within 30 days, as described in “Your rights” above.
Deleting your booking from our database does not remove copies held elsewhere, such as the calendar invitation in your own inbox or calendar, or records a payment provider is required to keep.
Payments for paid appointments
Some appointments may require payment. When they do, you are sent to a checkout page run by Stripe or Paystack, and you enter your card or mobile-money details directly with that provider. We never see or store your full card number or payment credentials.
The payment provider receives your email address, the amount, and a booking reference, and handles the payment under its own privacy policy. Bulletproof Scheduling stores only the payment status, amount, currency, and the provider's transaction reference with your booking, so we can confirm the appointment and process any refund.
Children
This website is for business use. It is not meant for children under 16. We do not knowingly collect information about children. If you think a child has sent us information, email us and we will delete it.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If the change is important, we will say so clearly on the website.
How to reach us
Bulletproof Automation QA is a U.S. limited liability company. For anything to do with your privacy, email us and put “Privacy” in the subject line.
info@bulletproofautomations.comSee also our Terms of Service.