Last updated: January 28, 2026
This policy applies to EventFlow Pro (https://eventflowpro.xyz), developed by Ironlock SA.
EventFlow Pro ("we", "our", "us") is committed to protecting your privacy and being transparent about how we collect, use, store, and share your data. This privacy policy describes how EventFlow Pro handles information when you use our event management platform, including when you integrate your Google Workspace account with our services.
Our primary goal is to provide a seamless event management experience while maintaining the highest security and privacy standards for your Google Calendar and Gmail data.
EventFlow Pro's use and transfer to any other app of information received from Google APIs will adhere to theGoogle API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for serving advertisements or for any purpose other than providing and improving the event management features of our application.
When you connect your Google account to EventFlow Pro, we collect and process the following types of Google user data:
We collect your Google account email address and name to:
Through the https://www.googleapis.com/auth/calendar scope, we collect:
We do NOT collect or access your existing calendar events, appointments, or personal schedule.
Through the Gmail API gmail.send scope, we collect:
We do NOT collect, read, or access your inbox, received emails, sent folder, drafts, personal correspondence, contacts (beyond manually added guests), or ANY emails except the invitations we send on your behalf.
In addition to Google user data, we collect information you explicitly provide when creating events:
We use the Google user data we collect exclusively to provide and improve EventFlow Pro's event management features. Specifically:
We use the `gmail.send` scope to compose and send personalized event invitation emails to the guests you specify in your event guest list. Emails are sent from YOUR Gmail address (not a generic EventFlow Pro address) to maintain authenticity and improve deliverability. The Gmail API returns a success/failure status for each send, which we use to track delivery.
We use your Google Calendar to create calendar events for your scheduled events, complete with event details, attendee lists, and automatic reminders. This allows you and your guests to have the event on their calendars.
We read the attendee response status from calendar events we created to display who has accepted, declined, or not yet responded to your event invitation. This helps you manage your event effectively.
When we send an email through Gmail's API, the API returns a success or failure response. We store this status (sent/failed) to display which invitations were successfully delivered. We do NOT access your Sent folder or read any emails - the status comes directly from the send API response.
We may analyze aggregated, anonymized usage patterns (such as average number of events created, common invitation send times) to improve EventFlow Pro's features and user experience. We do NOT analyze the content of your emails or calendar events.
We do NOT sell, rent, trade, or otherwise transfer your Google user data to third parties.
We will never sell your Google user data to advertisers, marketers, data brokers, information resellers, or any other third party for any reason.
We may share minimal Google user data with trusted service providers who help us operate EventFlow Pro, but only under strict conditions:
These service providers are contractually obligated to use your data only for providing services to EventFlow Pro and are prohibited from using it for their own purposes.
We may disclose Google user data if required by law, court order, or government regulation, or if we believe disclosure is necessary to:
We do NOT share your Google user data with advertising networks, analytics companies (beyond basic web analytics that don't access Google data), or marketing platforms. Your email content and calendar data are never used for targeted advertising, retargeting, or interest-based advertising.
In the event EventFlow Pro is acquired by or merged with another company, your Google user data may be transferred to the acquiring entity. We will notify you via email before any such transfer and provide you the opportunity to delete your account and revoke Google API access before the transfer occurs.
Summary: We do not transfer or disclose your Google user data to third parties for purposes other than providing EventFlow Pro's event management services. Your data is not sold, used for advertising, or shared with data brokers.
We implement industry-standard security measures to protect your Google user data from unauthorized access, disclosure, alteration, or destruction:
While we implement strong security measures, no system is 100% secure. We continuously update our security practices to protect your data.
EventFlow Pro requests the following specific API scopes from Google. Here's exactly what each scope allows and how we use it:
https://www.googleapis.com/auth/calendarWhat it allows: Access to manage your Google Calendar events
How we use it:
We do NOT: Read your existing calendar events, access your personal schedule, or modify events not created by EventFlow Pro
https://www.googleapis.com/auth/gmail.sendWhat it allows: Send email on your behalf
How we use it:
We do NOT: Read your inbox, access received emails, read your sent folder, access your drafts, read personal correspondence, or access ANY emails except those we send on your behalf
We strictly prohibit the use of Gmail data for any marketing or advertising purposes. No human at EventFlow Pro will ever read your email content unless you provide explicit consent for troubleshooting or if required for legal compliance. Your inbox and personal correspondence remain completely private.
We retain your Google user data only for as long as necessary to provide EventFlow Pro's services or as required by law. Here's our retention policy:
| Data Type | Retention Period | Deletion Policy |
|---|---|---|
| Guest Email Lists | Duration of event + 30 days | Automatically deleted 30 days after event conclusion |
| Gmail OAuth Tokens | Until you revoke access | Deleted immediately when you disconnect Gmail or delete account |
| Email Delivery Status | 90 days | Automatically purged after 90 days for troubleshooting purposes |
| Calendar Event IDs | Duration of event + 90 days | Deleted 90 days after event or when you delete the event |
| Account Data | Until account deletion | Permanently deleted within 30 days of account deletion request |
You can request deletion of your Google user data at any time by:
All deletions are permanent and cannot be reversed.
You have full control over your Google user data and how EventFlow Pro uses it:
Request a copy of all data we've collected about you by emailing support@eventflowpro.xyz
Disconnect your Google account anytime through EventFlow Pro settings or Google Account permissions
Request complete deletion of your data, which will be processed within 30 days
Choose not to connect your Google account - you can still use EventFlow Pro's other features
Privacy & Policy Inquiries
vincent@ironlocksa.com
Developer Contact
vincent@ironlocksa.com
EventFlow Pro is a product of Ironlock SA. We comply with GDPR, CCPA, and Google API Services User Data Policy including Limited Use requirements.
© 2026 EventFlow Pro by Ironlock SA. All rights reserved.
For questions about this privacy policy, contact: support@eventflowpro.xyz