Privacy Policy

MMV Calendar (“MMV Calendar,” “we,” “us,” or “our”) is a scheduling tool operated by MMV Travel Group (My Mickey Vacation Travel & Dreams Fulfilled Travel). It lets our travel advisors offer bookable times and lets guests schedule appointments with them. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

When you book an appointment (guests). We collect the name, email address, and phone number you enter, any notes you choose to add, the meeting method you select (phone, Google Meet, or Zoom), the date and time you choose, and your time zone.

Advisor accounts. For advisors who use MMV Calendar, we store a name, email address, availability hours, meeting types, booking-page settings, and time zone. Advisor accounts are created by invitation only.

Connected services. If an advisor connects Google Calendar or Zoom, we receive limited information from those services as described in Sections 4 and 5 (for example, the connected account's email address and the information needed to create or read calendar events and meetings).

Technical data. Like most online services, our hosting and infrastructure providers process basic technical information (such as IP address and browser type) as needed to operate the service securely.

We use the information above to:

• schedule appointments and show accurate availability;
• send confirmation, reminder, and cancellation emails;
• create and remove calendar events and video meetings when an advisor has connected Google Calendar or Zoom;
• operate, secure, support, and improve the service.

We do not sell your personal information, and we do not use it for advertising.

If an advisor connects their Google Calendar, MMV Calendar requests limited access in order to:

• read the advisor's busy/free times so already-scheduled events are hidden from their booking page and double-booking is prevented;
• create a calendar event (and, if selected, a Google Meet link) when a guest books, and remove that event if the booking is cancelled;
• read the connected Google account's email address, only to display which calendar is connected.

MMV Calendar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, use it for advertising, or use it to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models.

If an advisor connects their Zoom account, MMV Calendar requests limited access in order to create a scheduled Zoom meeting on the advisor's account when a guest selects Zoom, delete that meeting if the booking is cancelled, and read the connected account's email address to display which Zoom account is connected.

We store only the OAuth token needed to perform these actions and the account email; we do not access, store, or process Zoom meeting content, recordings, or participant data. When an advisor removes the app from their Zoom account, Zoom notifies us and we delete the stored Zoom connection for that account, consistent with Zoom's data-compliance requirements. This data is never sold, used for advertising, or used to train AI/ML models.

With your advisor. Booking details (your name, contact information, notes, and meeting details) are shared with the advisor you book with.

Service providers. We use trusted providers to run the service, who process data on our behalf under agreements that limit their use of it: Supabase (database and authentication), Vercel (hosting), Resend (email delivery), Google (calendar sync), and Zoom (meeting creation).

Legal reasons. We may disclose information if required by law or to protect the rights, safety, or security of our users, the public, or MMV Travel Group.

We do not sell your personal information.

We keep booking records and account information for as long as needed to provide the service and to meet our legitimate business and record-keeping needs, after which we delete or de-identify it. An advisor can disconnect Google Calendar or Zoom at any time from their settings, which removes our stored access to that service. You may also contact us to request deletion of your information, subject to any records we must retain.

All traffic to and from MMV Calendar is encrypted in transit (HTTPS/TLS). OAuth tokens for connected services are stored server-side and are never exposed to the browser. Access to stored data is restricted to the systems and personnel that need it to operate the service. No method of transmission or storage is completely secure, but we work to protect your information using reasonable safeguards.

• Cancel a booking. Every confirmation and reminder email includes a cancellation link.
• Disconnect a service. Advisors can disconnect Google Calendar or Zoom at any time from their settings.
• Access or delete your data. Contact us (below) to request access to, correction of, or deletion of your personal information.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA/CPRA. We will honor those rights as required by applicable law; contact us to exercise them.

MMV Calendar is intended for adults arranging travel consultations and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

MMV Calendar and its service providers operate in the United States. If you access the service from outside the United States, you understand your information will be processed in the United States.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and significant changes will be reflected on this page.

Questions or requests about this policy or your information? Email us at info@mymickeyvacation.com. See also our Terms of Service.