Overview
SurroHub ("SurroHub," "we," "us," or "our") provides scheduling and client-management software for surrogacy agencies. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to the SurroHub application and related services available at app.surrohub.io and surrohub.io.
By using SurroHub, you agree to the practices described in this policy. If you do not agree, please do not use the service.
Contents
1. Information we collect
Information you provide
When you or your agency create an account and use SurroHub, we collect information such as your name, email address, phone number, agency details, appointment and booking records, and any notes or content you enter into the application.
Information from connected services
If you choose to connect a third-party account, such as your Google Calendar, we access certain information from that account with your permission. See Section 2 for details specific to Google.
Information collected automatically
We collect basic technical information needed to operate and secure the service, such as log data, device and browser information, and usage activity.
2. Google user data
SurroHub offers an optional integration that lets a user connect their Google Calendar so the app can coordinate appointment scheduling. This integration is entirely optional and is only enabled when a user explicitly connects their Google account through Google's secure OAuth consent flow.
Scopes we request and why
https://www.googleapis.com/auth/calendar.events— Used to create, update, and cancel calendar events for appointments that are booked, rescheduled, or cancelled in SurroHub, so the connected Google Calendar stays in sync with the user's SurroHub bookings. We only create or modify events that originate from SurroHub; we do not read, alter, or delete the user's unrelated personal events.https://www.googleapis.com/auth/calendar.freebusy— Used to read free/busy availability so SurroHub can avoid offering or scheduling appointment times that conflict with the user's existing commitments. This scope returns only busy time ranges, not the content, titles, or attendees of any event.
We request the minimum scopes necessary to provide these features. We deliberately do not request full Google Calendar access, and we do not request access to Gmail, Google Drive, Contacts, or any other Google data.
What we store
To keep the integration working, we securely store the OAuth tokens that authorize SurroHub to act on the connected calendar, along with the identifiers of the calendar events SurroHub itself creates. We do not copy or retain the contents of your personal calendar events.
3. Limited Use disclosure
SurroHub's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we do not use Google user data for serving advertisements, we do not sell Google user data, we do not transfer or use it for purposes other than providing or improving the user-facing features described in this policy, and we do not allow humans to read this data unless we have your affirmative consent for specific messages, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data has been aggregated and anonymized.
4. How we use information
- To provide, operate, and maintain the SurroHub scheduling and client-management features.
- To create and sync appointment bookings with a user's connected Google Calendar and to check availability so bookings don't conflict.
- To send service-related communications, such as booking confirmations and reminders, where enabled.
- To secure the service, prevent abuse, troubleshoot, and comply with legal obligations.
5. How we share information
We do not sell your personal information or Google user data. We share information only in these limited circumstances:
- Service providers who process data on our behalf to operate the service (for example, hosting, database, email, and SMS delivery providers), under contracts that require them to protect the information and use it only for the services they provide to us.
- Within your agency, as needed to deliver the product to the agency account you belong to.
- Legal and safety reasons, when required by law or to protect the rights, property, or safety of SurroHub, our users, or others.
- Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this policy.
6. Data retention
We retain personal information for as long as your account is active or as needed to provide the service. Google OAuth tokens are retained only while your calendar connection is active; when you disconnect your calendar or your access is revoked, we delete the stored tokens for that connection. You may request deletion of your account data as described below.
7. Your choices & revoking access
You can disconnect your Google Calendar from SurroHub at any time:
- In SurroHub, use the Disconnect control on the scheduling screen. This revokes the connection and deletes the stored tokens for that calendar.
- In your Google Account, you can review and revoke SurroHub's access at any time at myaccount.google.com/permissions.
To request access to, correction of, or deletion of your personal data held by SurroHub, contact us using the details below and we will respond in accordance with applicable law.
8. Security
We use industry-standard safeguards to protect information, including encryption in transit, access controls, and secure storage of credentials and tokens. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our safeguards.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Continued use of SurroHub after changes take effect constitutes acceptance of the updated policy.
10. Contact us
If you have questions about this Privacy Policy or how we handle your data, contact us at:
SurroHub
Email: surrohub.io@gmail.com