Privacy Policy

Effective date: July 5, 2026

Carpenter & Company, CPAs, PC (“we,” “us,” or “our”) operates the Carpenter & Company Scheduling application (the “App”), which allows clients and contacts to book appointments with our staff, and allows our staff to connect their calendars so that appointment availability is accurate.

Information we collect

  • Booking information you provide: when you book an appointment, we collect your name, email address, time zone, and your answers to any intake questions (for example, a phone number or a brief description of what you’d like to discuss).
  • Calendar availability information (staff only): when a staff member connects their Google account, the App accesses their Google Calendar on a read-only basis, solely to determine busy/free times so that appointments are not double-booked. The App reads only event start and end times for this purpose. It does not read event titles, descriptions, attendees, or attachments, and it never creates, modifies, or deletes events in a connected Google Calendar.

How we use information

  • To schedule, confirm, remind about, reschedule, and cancel appointments.
  • To create the associated video-conference meeting and send calendar invitations by email.
  • To determine staff availability by combining calendar busy times with existing bookings.

Google user data — Limited Use disclosure

The App’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • Google Calendar data is used only to compute appointment availability.
  • Google Calendar data is not sold, is not used for advertising, and is not transferred to third parties except as necessary to provide the scheduling feature, to comply with applicable law, or as part of a merger or acquisition with notice to users.
  • No human reads Google Calendar data obtained through the App except with the calendar owner’s consent, where necessary for security or compliance, or where required by law.

Data storage and security

Booking records are stored in our practice-management system. Google account tokens are encrypted at rest using industry-standard encryption (AES-256-GCM). Access to booking data is limited to firm personnel. Public booking pages are rate-limited and served over HTTPS.

Data retention and your choices

  • Appointment records are retained as part of our client engagement records.
  • Staff may disconnect their Google account at any time from within the App, which deletes the stored tokens. Access can also be revoked at any time from your Google Account settings at myaccount.google.com/permissions.
  • You may cancel or reschedule an appointment using the link in your confirmation email.
  • To request access to or deletion of your booking information, contact us using the details below.

Children’s privacy

The App is intended for use by business clients and their representatives and is not directed to children under 13.

Changes to this policy

We may update this policy from time to time. The current version will always be available at this page, with the effective date shown above.

Contact us

Carpenter & Company, CPAs, PC Email: wcarpenter@carpentercpas.com Website: https://carpentercpas.com