Privacy Policy – HAIKODE

This Privacy Policy explains how our Hospital Appointments Integration plugin (“the Plugin”, “we”, “us”, or “our”) collects, uses, and protects information when you use our WordPress plugin that connects to Google Sheets via your Google account.

1. Information We Collect

We only collect the following information via Google OAuth2 when you connect your account:

Your email address (via userinfo.email)
Access tokens that allow the plugin to:
- View and manage your selected Google Sheets (spreadsheets scope)
- List your spreadsheet files to select from (drive.readonly scope)

We do not collect your name, profile photo, or other personal data unless explicitly required.

2. How We Use Your Information

We use your information only to:

Authenticate your Google account
List your available Google Sheets for you to select
Save hospital appointment data into the selected sheet
Display your email in the plugin settings (for verification and transparency)

We do not access, store, or share the contents of your Drive or Sheets beyond the specific files and worksheets you select.

3. Data Storage

All access tokens and selected sheet details are securely stored on your WordPress site’s database using WordPress’s update_option() system. We do not transmit or store your data on any external servers.

4. Data Sharing

We do not sell, share, or disclose your data to any third parties. All operations happen between your WordPress site and Google APIs using secure OAuth2 authorization.

5. Google API Disclosure

This plugin uses Google APIs to connect to your Google Sheets account. Your use of Google services through this plugin is subject to the Google Privacy Policy.

The plugin’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Your Consent and Control

You can:

Disconnect your Google account at any time from the plugin settings
Revoke access from your Google Account permissions page

7. Security

We follow best practices to protect your information, including:

Storing tokens securely in WordPress options
Using nonces to verify requests
Ensuring all OAuth flows happen over HTTPS

However, no system is 100% secure. Please ensure your WordPress site is regularly updated and properly secured.