Privacy Policy

Last updated 17 October 2026

Highflag ("we") sets up missed-call text-back, lead follow-up and appointment booking for home-service businesses. This page explains what data we handle and why. Questions: highflagagency@gmail.com.

Who this covers

• Business clients who hire Highflag and connect their Google Calendar.
• Customers of those businesses who text or use a booking page.
• Visitors to highflag.vercel.app.

Google Calendar data

When a business client signs in with Google, we ask for two permissions: see when they are free or busy, and create events on their calendar. We use them for one purpose: to offer customers open appointment times and to add the booked appointment to the client's calendar.

• We read free and busy times only to work out which slots are open.
• We create an event with the customer's name, phone number, service and notes. We do not read, change or delete other events.
• We store the client's Google email and an access token so bookings keep working. The token is stored in our database and is never shown to anyone.

Highflag's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, use it for advertising, or let people read it except as needed to run the booking service, to follow the law, or with the client's consent. Our systems do not train AI models on Google user data.

A client can remove access at any time at myaccount.google.com/permissions, or by emailing us. When access is removed or the client cancels, we delete the stored token.

Booking and messages

When a customer books, we collect the name, phone number and what they need. This goes to the business they are booking with and into that business's calendar. Chat messages are processed by an AI service so the assistant can reply. We do not use these messages for advertising.

Website visitors

The Highflag website does not use advertising cookies. Our host (Vercel) keeps standard server logs, such as IP address and page requested, for security and reliability.

Where data is kept

Data is stored with Supabase and hosted on Vercel. Access is limited to Highflag, and we keep data only as long as the business client uses our service, plus a short period afterwards for billing and legal needs.

Your choices

You can ask us to show, correct or delete your data by emailing highflagagency@gmail.com. We reply within 14 days.

Changes

If we change this policy, we update the date above.