Privacy
What we keep, and why.
isbusy turns a meeting room’s calendar into a colour on the wall. That needs read access to the calendar and an account to hold it. This page is the whole of what that means.
Last updated: 3 September 2026
Who is responsible
We design, build and run the isbusy sign and the dashboard behind it. The personal data they handle is ours to look after, and we are the data controller for it. Nobody else stands in between.
Questions, corrections and deletion requests all go to contact@isbusy.co, and reach us directly.
What we store
Your account: your e-mail address and a hash of your password. The password itself is never stored.
Your signs: the device id, the name and room you gave it, the colour it is showing, when it last checked in and its firmware version.
Your calendar link: the e-mail address of the Google account you connected, the access and refresh tokens Google issued, and the title and end time of the event running in that room right now.
What we do with Google data
We ask for two permissions: read-only access to calendar events, and your Google address so the dashboard can show you which account a sign is wired to.
Once a minute we ask the calendar one question — what is happening right now. We do not download, copy or keep your past or future calendar.
We use that data only to drive the sign. We do not advertise with it, sell it, or train anything on it. Our use of Google user data follows the Google API Services User Data Policy, including its Limited Use requirements.
You can cut the link at any time with Disconnect on the device page, which deletes the tokens from our server, or from your Google account’s permissions page.
Where it lives and how long
Everything sits in a single SQLite database on our own server, and in its backups. Traffic to the dashboard is over https, and access to that machine is limited to the people who run isbusy.
A sign-in lasts 30 days. The stored event title is overwritten on every poll. Disconnecting a calendar deletes its tokens at once.
Deleting your account removes the account, its rooms and its calendar links.
Who else sees it
Google, to read the calendar you connected. Resend, to send confirmation and password-reset e-mail. The company hosting the server.
Nobody else. We do not sell or rent anything about you, and we hand data over only where the law actually requires it.
Your rights, and deletion
You can ask what we hold about you, have it corrected, or have it deleted. Under Turkish data protection law (KVKK art. 11) we answer within 30 days.
We handle deletion by hand: write to contact@isbusy.co and we will delete the account and everything attached to it, and tell you when it is done.
Cookies
The dashboard sets one cookie, the one that keeps you signed in. This marketing site uses Umami on our own server: no cookies, no personal data.
The demo button opens a Google Calendar booking page. Whatever you type there — your name, your address, the time you pick — goes to Google under Google’s own privacy policy, and lands in our calendar as an appointment. We keep it there and nowhere else.
Changes
If this page changes, the date at the top changes with it. Anything that materially affects you, we send by e-mail.