Privacy Policy

Effective date: May 3, 2026

This Privacy Policy describes how STL Agency LLC, a Delaware limited liability company doing business as Zeduwul ("Zeduwul," "we," "us," or "our"), collects, uses, and shares information when you use our scheduling service available at www.zeduwul.com (the "Service").

By using the Service, you agree to the collection and use of information as described below. If you do not agree, please do not use the Service.

1. Who we are

STL Agency LLC dba Zeduwul is the controller of personal information collected through the Service. You can reach us at aaron@stlagency.net.

2. Information we collect

We collect the following categories of information:

Account information. When you accept an invitation to a workspace, we collect your name, email address, role (admin or member), workspace assignment, time zone, and account preferences.

Calendar connection data. When you connect your Google Calendar, we receive an OAuth access token, refresh token, and token expiry from Google. We also receive the email address of the connected Google account so we can display it in the Service. We use these tokens only to read free/busy information from your primary calendar and to create or cancel events you authorize.

Calendar availability data. To prevent double-booking, we periodically read busy/free time blocks from your connected calendar via the Google Calendar freebusy API. We do not read the title, description, attendees, or content of your existing events.

Booking data. When someone books a meeting on your public page, we store the invitee's name, email address, optional notes, time zone, and the meeting time. We also store the Google Calendar event ID and Google Meet URL we create on your behalf.

Invite request data. When someone requests an invitation through /signup, we collect their name, email, and IP address.

Usage data. Standard server logs (IP address, user agent, request paths, timestamps). We do not use third-party analytics or advertising trackers.

3. How we use information

We use the information we collect to:

Provide the Service: authenticate you, manage your workspace and account, render your public booking page, calculate availability, create and cancel meetings on your calendar, and send booking confirmations.
Communicate with you: respond to support requests, send transactional emails (sign-in links, booking confirmations, cancellations), and notify administrators of pending invite requests.
Maintain and secure the Service: detect abuse, enforce rate limits, debug issues, and prevent fraud.
Comply with legal obligations.

We do not sell personal information. We do not use your information for advertising.

4. How we share information

We share information only as described here:

Service providers. We use the following providers to operate the Service:

Supabase (database, authentication) — stores your account data, calendar tokens (encrypted at rest), and bookings.
Vercel (hosting) — runs the Service and processes server logs.
Google (Google Calendar API) — receives requests to read free/busy data and create/cancel calendar events you authorize.
ZeptoMail (transactional email) — delivers sign-in, invitation, and booking emails.

These providers only process your data to perform services on our behalf and are bound by confidentiality and data-protection obligations.

Bookings. When an invitee books a meeting with you, the invitee's name, email, and notes are visible to you (the host) and are written to your Google Calendar event. The host's name and connected calendar email appear in the Google Calendar event sent to the invitee.

Legal disclosures. We may disclose information if required to comply with applicable law, a valid legal request, or to protect the rights, property, or safety of Zeduwul, our users, or the public.

Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to this Privacy Policy or a substantially equivalent one.

5. Storage and retention

We store data in Supabase Postgres in the United States. OAuth tokens are encrypted at rest. We retain:

Account and workspace data for as long as your account is active.
Booking records for the lifetime of the booking, plus a reasonable period afterward for record-keeping.
Calendar tokens until you disconnect Google Calendar at /dashboard/integrations.
Server logs for up to 90 days.

You may request deletion of your account at any time by emailing aaron@stlagency.net. Within 30 days of your request we will delete your account, your event types, your availability rules, and your calendar tokens. Bookings on your calendar that have not yet occurred will be cancelled.

6. Your rights

Depending on your location, you may have the right to:

Access the personal information we hold about you.
Request correction of inaccurate information.
Request deletion of your information.
Receive a copy of your information in a portable format.
Object to or restrict certain processing.
Withdraw consent (where processing is based on consent).

To exercise any of these rights, email aaron@stlagency.net. We will respond within 30 days.

7. Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Cookies and similar technologies

We use only the cookies necessary to operate the Service: an authentication session cookie set after sign-in, and a CSRF token for form submissions. We do not use advertising cookies, cross-site tracking pixels, or third-party analytics cookies.

9. International users

If you access the Service from outside the United States, you consent to the transfer of your information to the United States, where data-protection laws may differ from those in your country.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available at this page; the "Effective date" above shows when it was last revised. Material changes will be communicated via email to account holders.

11. Contact

Questions or concerns? Contact us at aaron@stlagency.net or write to:

STL Agency LLC dba Zeduwul Delaware, USA