Privacy Policy

Who we are

eMoon Consulting Ltd., doing business as Refresh Mind℠, provides Richard Schwartz’s sessions, classes, and related scheduling services. This policy explains how our website and RefreshMind Admin handle personal information, including information from connected Google accounts.

For privacy questions or requests, contact refreshmindnow@gmail.com.

Information we use

We use the contact details, booking or class selections, scheduling preferences, acknowledgments, and messages you provide to arrange services and respond to you. We maintain registration, attendance, payment-status, and communication records needed to administer bookings.

Card payment details are handled by the payment provider. Our application records payment references and status; it does not store your full card number or security code. For Zelle payments, staff record payment confirmation and the information needed to match a payment to a booking.

Hosting and analytics services process technical information about website requests, device or browser characteristics, page use, and performance. We use this to operate, secure, and improve the website. Please do not put medical records, financial credentials, or other highly sensitive information in booking notes or messages.

Google accounts and permissions

Google connections support authorized staff administration. Customers do not need to authorize access to their Google accounts to book a service. Signing in as an administrator does not connect a calendar or Gmail account. Staff connect each service separately in Settings.

• Google sign-in: we use your Google account identifier, verified email address, and basic profile information to identify you and restrict administration to approved accounts.
• Google Calendar: when a staff member connects an account, we read its calendar list and event information needed for the calendars they select. Selected calendars supply busy times to prevent scheduling conflicts. For the explicitly selected main calendar, event-editing access allows booking events, attendees, and scheduling updates to synchronize between Google Calendar and Refresh Mind.
• Gmail: when a staff member connects the sending account, we use its identity and send-only Gmail permission to send booking confirmations, reminders, rescheduling messages, and other service communications. This integration does not request access to read the account’s inbox.

We store connection settings, account and calendar identifiers, the event information needed for synchronization, and encrypted authorization tokens. Booking communications and delivery records are retained to administer the service and investigate delivery problems.

Google user data is used only to provide these features. We do not sell it, use it for advertising, or use it to train generalized AI or machine-learning models. Access by staff or service providers is limited to providing and supporting these features, security, and applicable legal obligations.

Refresh Mind’s use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Service providers and sharing

We use Vercel for website hosting, analytics, and performance measurement; Railway for backend and database hosting; and Cloudflare R2 for private encrypted database backups. Google provides authorized sign-in, calendar, and email features. Cal.com currently supports existing booking flows, and Stripe processes card payments, including payments through supported booking integrations.

These providers receive the information needed for their services. Booking names, contact details, dates, locations, and related details may appear in messages and calendar invitations sent to the organizer and intended participants. We may disclose information when legally required or necessary to address fraud, misuse, or a security incident.

Links to THInK, WhatsApp, payment services, or other external websites lead to services with their own privacy policies. Following a link does not authorize our application to access your account on that service.

Storage, security, and retention

We use encrypted connections, access controls, encrypted provider tokens, and encrypted database backups to protect information. Authorized staff and technical operators can access information needed to run and support the service. No online service can guarantee absolute security.

We keep information for as long as needed to provide services, maintain booking and payment records, resolve disputes, meet applicable obligations, and protect the service. Technical and synchronization records may be removed or replaced as they are no longer needed. Our database backup process retains the latest successful encrypted snapshot rather than a historical archive.

After information is removed from the active database, a previously created backup may still contain it until a successful replacement. If a backup is restored, deletion requests must be reapplied. Providers may retain their own records under their policies. Information may be processed in the countries where our service providers operate.

Your choices and deletion requests

Staff can disconnect Calendar and Gmail integrations in Settings and can revoke the application’s Google permissions from their Google account connections. Revoking access prevents further authorized Google API access; it does not automatically delete existing booking records, delivered emails, or calendar events already created.

To request access, correction, or deletion of personal information, email refreshmindnow@gmail.com. We may need to verify your identity before acting. We will explain when information must be retained for a booking, payment, legal obligation, or security purpose.

Changes to this policy

We may update this policy as our services change. The date above identifies the current version. Material changes will be communicated through the website or another appropriate channel.

Read our Terms & Conditions for the terms that apply to sessions, classes, and website use.