Privacy Notice

Psyhub Booking is available at fom.fm to receive therapy appointment requests, confirm arrangements, send notifications, and manage the corresponding calendar events. This notice describes information handling by the booking service and its Google Calendar connection. The therapy agreement separately covers the therapeutic setting and confidentiality. For questions, use the contact options on the therapy page.

Appointment information

The service receives the name you wish to use, email, service, session format, selected time, and any contact details, topics or additional information you choose to submit. These details are used to contact you and manage your appointment. Cloudflare Workers and D1 process and store the information; Mailgun sends appointment emails to the relevant client and therapist. New-request emails to the therapist may include the submitted form details. Please avoid providing unnecessary sensitive details in the form.

Google authorization

Only the therapist connects a Google account through the protected administration area. Clients do not need to authorize their own Google accounts to book. The service uses openid and email to verify the connected account, and calendar.events.owned to manage website appointments in calendars owned by the therapist. Although this is the scope granted by Google, the application further restricts its operations to website-created events carrying the appointment identifier. It does not read or modify unrelated calendar events.

The service stores the connected account email and identifier, and encrypts the OAuth client configuration, access token and refresh token. It retains website event identifiers, synchronization status and necessary meeting links to support retries and later changes.

Calendar events and invitations

After the therapist confirms an appointment and enables calendar synchronization, the service sends Google Calendar the appointment title, which may include your name, start and end times, client email, and necessary format, location or meeting information. If Google Meet is selected, the service requests a meeting through Google Calendar. Google processes the event and invitation and sends calendar notifications according to its service settings.

The submitted therapy topic, additional form notes and therapist's internal notes are not placed in the calendar event. An event title may still indicate that it is a therapy appointment; visibility also depends on your email, calendar application and account sharing settings.

Tencent Meeting / VooV appointments use that service to create a meeting and include its link in appointment communications. This does not involve authorization of the client's Google account.

Use, retention and removal

Information obtained through Google APIs is used only for account verification and the appointment calendar features described here. It is not used for advertising, sold, or used to train general-purpose AI models. Google handles calendar invitations, Mailgun handles appointment email delivery, and Cloudflare hosts the website service. Those providers process relevant information under their applicable terms and privacy policies.

The connection supports ongoing appointment synchronization while retained. The therapist can disconnect it in the administration area; the service requests revocation and removes its stored tokens. Access can also be revoked through the Google account's third-party access settings. Disconnecting does not automatically remove existing Google events or website appointment history. Appointment and synchronization records support scheduling and troubleshooting. For access, correction or deletion requests, use the contact options on the therapy page so the applicable request can be verified and handled.

Access controls and encryption protect stored OAuth credentials, but no network service can guarantee absolute security. Protect your email and calendar accounts and do not share personal appointment management or cancellation links.