Privacy policy.
Updated 6 October 2026
This policy explains how Baybayin Studio uses information shared through this website, project inquiries and discovery-call scheduling. For privacy questions, contact baybayinstudio@gmail.com.
Information you share
The inquiry form asks for your name, email address, resort information, the service you are considering and a description of your project. It may also record your interest in the early bird offer. Share only the information needed to discuss your project; please do not include passwords, payment details or private guest records.
Choosing “Send an inquiry instead” opens an email draft for you to review. The inquiry reaches us only when you send that email through your email provider.
Discovery calls and Google Calendar
We use your contact details, project brief and chosen appointment time to arrange a discovery call and communicate with you about it.
When the custom scheduler is available, confirming a call sends those details to our scheduling service, which creates an event in the studio owner's Google Calendar, adds you as an attendee and requests a Google Meet link. Google handles the calendar invitation and meeting services.
If you use the Google booking page embedded in or linked from this website, the details entered on that page are processed by Google. The project brief entered in our website form is not automatically transferred to that embedded booking page.
Only the studio owner connects a calendar to the custom scheduler. The private booking manager lets the owner review website bookings and cancel them; cancellation asks Google to notify the guest and releases the time. Visitors do not grant the studio access to their own calendars.
How we use Google user data
The owner connection requests permission to check free/busy periods and manage events on calendars the owner owns. It also uses the connected account’s email address to identify the calendar account. If booking alerts are enabled, it requests Gmail send permission to send booking and cancellation notices to the owner’s selected inbox. This permission is not used to read inbox messages. The scheduler currently uses the owner's primary calendar to check availability, create discovery-call events and check existing bookings for retries or cancellations.
The public calendar display returns available appointment times, without exposing existing event titles, descriptions or attendee lists. Calendar access credentials are stored on the server and are not included in the public website files.
Google user data is used only to provide and maintain scheduling. We do not sell it, use it for advertising, or use it to train general-purpose AI models. Baybayin Studio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Services that process information
Cloudflare hosts the website and custom scheduling service. Google provides Calendar, invitations and Meet. Your email provider processes inquiries you choose to send. These providers may process technical request information as part of operating and protecting their services.
Appointment details are shared with the studio and the attendee through Google Calendar. We do not share Google Calendar data with unrelated advertisers or data brokers.
See Cloudflare's privacy policy and Google's privacy policy for their own practices.
Storage and retention
The custom scheduler keeps booking metadata for up to 90 days for duplicate prevention and safe retries. This includes appointment times, request identifiers, hashed email identifiers and confirmation links. Notification queues keep event identifiers and delivery status for up to 90 days so failed owner emails can be retried without storing another copy of the project brief. The owner’s account and notification email addresses are stored with the connection settings. The server does not retain a separate copy of your project brief after processing it; the brief is included in the Google Calendar event.
Calendar events and email correspondence remain in the relevant calendar or mailbox until deleted there. Calendar access credentials remain on the scheduling server while the owner connection is maintained; the owner can revoke access through their Google Account.
We use technical safeguards such as HTTPS, server-side credential storage and checks on booking requests. No online service can guarantee absolute security.
Browser storage and service protection
The website uses browser storage to remember whether you dismissed or selected an offer and to support page navigation. Sample staff-app interactions use local browser storage. The owner connection uses a short-lived cookie to validate the Google authorization flow. The private booking manager uses a secure owner-session cookie that expires after two hours.
The scheduling service temporarily uses hashed network identifiers to limit abusive requests. You can clear website storage through your browser settings.
Your choices and requests
You can choose not to submit a form, review an inquiry before sending it, and contact us to request access, correction or deletion of information you shared. Email baybayinstudio@gmail.com with enough detail for us to identify the inquiry or appointment. We may need to verify that the request is yours.
Calendar owners can revoke the scheduler's access in their Google Account connections. To change or cancel a discovery call, contact the studio using the email above.
Changes to this policy
We will update this page when our information practices change and revise the date above.