VIALOT Privacy Policy

Last updated: November 15, 2026

1. Who we are

VIALOT (vialot.app) is operated by FOP Betlii Ihor Ihorovych, a sole proprietor registered in Ukraine. We are responsible for the personal data described here. Contact: privacy@vialot.app.

2. What VIALOT does

VIALOT creates a page in your Notion database for each event in your Google Calendar. Each page holds the event's title, date and a tag. When an event is cancelled, we add "[Скасовано]" (Cancelled) to the start of the page title. When an event moves, we update the page's date.

3. Data we collect

From Google sign-in: your Google account ID, email address and name. We also record when you last signed in.

From Google Calendar:

• a refresh token, so VIALOT can keep syncing without you signing in again;
• the email of the Google account you chose for the calendar;
• your primary calendar's time zone;
• for events in your primary calendar over the next 30 days (regular events and birthdays only): event ID, iCalendar ID, status, title, start and end time, last-modified time, recurring series ID, event type, organizer email and whether you are the organizer, and your reply to the invitation.

We do not read event descriptions, locations, other attendees or meeting links.

Before your first sync, the preview also counts events of other types (such as focus time) to show what will be skipped; it stores nothing.

Google grants calendar access to all of your calendars, with permission to view and edit events. Google does not offer a narrower option. VIALOT reads only your primary calendar and does not change any events.

From Notion: access and refresh tokens, your workspace name, the ID and name of the database you chose, its property names and tag options. VIALOT can see only the pages you select in Notion's permission window. If a sync is interrupted, VIALOT may look up pages in the chosen database by title and creation time to avoid creating duplicates; it stores nothing from this lookup.

What you set in VIALOT: time zone, tag rules (keywords), and whether to skip events you don't organize.

Cookies: two essential cookies only — your session (14 days) and a sign-in check (10 minutes). No analytics or advertising cookies.

4. How we use your data

We use your data only to provide the features you see:

• Sign-in — to know who you are.
• Sync — to create and update pages in your Notion database.
• Preview before the first sync — to count your events; nothing is stored.
• Time zone — for the upcoming booking feature.

5. How we store and protect your data

• Data is stored with Cloudflare (D1 database, with a location hint for Eastern Europe). Some technical data, such as sessions, is processed across Cloudflare's global network.
• Google and Notion tokens are encrypted with AES-256-GCM. Each token is bound to its field and user. The encryption key is kept in Cloudflare's secret storage, never in the database or source code.
• We do not store event titles. We store only a one-way hash (SHA-256) of each title. The title itself exists only in your Notion.
• Our own logs contain only error codes and counters — no event titles, IDs, tokens, authorization codes or URL parameters. Cloudflare may add standard technical details to its logs, such as the time of a request.

6. Who we share data with

• Cloudflare — hosting, database and logs.
• Google and Notion — we send requests on your behalf to your own accounts.
• Your Notion workspace — event titles and dates go there because you connected the database and turned sync on.

We share data with no one else. We do not sell data, show ads or use analytics.

7. How long we keep data

If for 12 months you don't sign in and sync isn't running, we delete your account.

Event-to-page links are also removed when you choose a different database, connect a different Google account for the calendar, or choose "Stop and forget" ("Зупинити й забути").

8. Your choices and deleting your data

Leave sync. In your dashboard, "Leave sync" ("Вийти з синхронізації") removes your Google Calendar access and email, and asks Google to disconnect VIALOT. You choose one of two options:

• Stop sync ("Зупинити синхронізацію") — we keep your Notion settings and the links between events and pages, so you can come back without duplicates.
• Stop and forget ("Зупинити й забути") — we also delete the links between events and pages. If you come back, new pages appear next to the old ones.

If you come back with a different Google account after "Stop sync", old pages may be marked "[Скасовано]".

Delete your account. Email privacy@vialot.app from your account's email. We delete your data within 30 days and reply when done. Deleting your account:

• removes all your data from our database;
• revokes VIALOT's access to your Google and Notion accounts;
• leaves the pages already created in your Notion — they are yours.

Some data disappears later: sessions within 14 days, logs within 7 days.

You can also remove VIALOT's access yourself at any time: in Google at myaccount.google.com/connections, and in Notion under Settings → Connections.

9. Google API Services User Data Policy

VIALOT's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• we use Google data only to provide the features described in section 4;
• we transfer it only as needed for those features — to your Notion workspace at your request, and to Cloudflare as our infrastructure;
• we do not use it for advertising and do not sell it;
• we do not use it to train AI or machine learning models;
• no person reads your data, except the owner of VIALOT, and only to delete data at your request, to give support with your explicit consent, for security, or to comply with the law.

10. Legal basis

We process your data to provide the service you asked for (performance of a contract).

11. Children

VIALOT is not intended for anyone under 16. We do not knowingly collect data from children under 16.

12. Changes to this policy

We show the date of the last update at the top of this page. If we make significant changes, we will email you before they take effect.

13. Contact

FOP Betlii Ihor Ihorovych, Ukraine — privacy@vialot.app

This policy is also available in Ukrainian; if the versions differ, the English version prevails.