Privacy

This page summarises how imta handles personal data. Replace it with your organisation's full policy before going live.

• Identity. You sign in with your Atmosphere account. We store your DID, username, display name and avatar URL.
• Email. Used only to send confirmations, calendar invitations and reminders. Never published or shared.
• Calendars. With your consent we read free/busy times from Google Calendar or Microsoft 365. We store start and end times of busy blocks, never titles, attendees or content. Tokens are encrypted at rest. You can disconnect at any time, which deletes the cached busy times.
• Bookings and invitations. Stored in our database in the EU and visible only to the people involved.
• Your Atmosphere repository. Only if you opt in: a public booking profile, public event types, and public group sessions are written to your own account. You can remove them here or in any ATProto client.
• Your rights. Export or delete your data from Settings at any time (GDPR art. 15, 17 and 20). Notification logs are kept for 90 days; busy blocks two days after they end.