Legal / Version 1.0

Privacy & data retention

Last updated 30 September 2026

Who this applies to

This policy covers Brutal Scheduler. When you use a booking link supplied by a company or professional, that organisation decides why and how your booking information is used. It is normally the data controller; Brutal Scheduler processes the information needed to provide the scheduling service on its behalf.

Information we process

The service may process account and workspace details; booking, availability, meeting and attendance records; client contact details; booking answers and feedback; internal notes entered by a workspace; and technical security data such as a hashed request identifier for rate limiting. We only use the information needed to provide, secure, support and improve the service.

How information is used and shared

We use information to authenticate users, manage bookings, send confirmations and reminders, prevent abuse, provide customer support and meet applicable legal obligations. Information is shared only with the service providers needed to operate the selected features: Stretx for identity and account services, infrastructure and database providers, Resend for email delivery, and Google or Monday.com only where a workspace enables those integrations.

Retention

Booking, client and workspace records remain available to the workspace while its account is active. The organisation running the booking is responsible for setting its own record-retention period and handling requests about booking data. Scheduler does not currently apply an automatic deletion period to those business records. Expiring booking-management and feedback links are invalidated when they expire or are revoked. Scheduler job-run records are automatically deleted after 90 days; they contain job status and a short technical error message, not booking content.

Security and your choices

We use access controls, signed or protected links, rate limiting and encrypted transport to protect the service. Workspace administrators can export booking and client reports. To request access, correction or deletion of information from a booking, contact the organisation that sent you the booking link. Account holders should use their established Scheduler support contact for account or privacy requests.

Updates

We may update this policy when the service or legal requirements change. The date below identifies the current version. Material changes will be communicated through the service where appropriate.