RivaviR Appointments

Privacy policy

Last updated: 12 November 2026

RivaviR operates RivaviR Appointments. This policy covers the appointments portal and its Google Calendar integration. Contact us at info@rivavir.org about this policy or your data.

Information we collect and why

We store your name, email address, phone number and a salted password hash to manage your account. We also store the names, adult/minor status and relationships of family members you add, together with technical identifiers. This information lets you manage your family and book for the right person. Only add information you are authorized to provide.

Google Calendar access and use

Each participating practitioner authorizes access to their calendar through Google OAuth. We use calendar.freebusy to check busy times and calendar.events to create and read appointment events. We request these permissions to offer available slots, confirm bookings and display your upcoming appointments. We do not use Google access for advertising, profiling or training AI models.

A booking sends the attendee’s first and last name, appointment time and technical account/person identifiers to the practitioner’s Google Calendar. We do not send your email address, phone number or password to Google Calendar. Events already present in the practitioner’s calendar are used to determine availability; their titles and descriptions are not displayed to clients.

Storage, sharing and protection

Cloudflare hosts the portal and its account/family database. Appointments are stored in the practitioners’ Google calendars and retrieved when needed; the portal does not keep a separate appointment database. Google and Cloudflare process information to provide these services. Appointment data is accessible to the practitioner and to people who have access under that calendar’s sharing settings. Your portal account can view its own linked appointments.

OAuth refresh tokens and the application’s client secret are held in server configuration, not sent to your browser. Temporary access tokens are cached on the server. Production traffic uses HTTPS. Passwords are stored as salted hashes, and a session cookie keeps you signed in. The portal also uses Google Fonts, so your browser contacts Google to load its fonts.

RivaviR Appointments’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell personal or Google user data. Access by RivaviR personnel is limited to support, security, operation of the service and legal obligations.

Retention, deletion and your choices

Account and family information remains stored until removed by RivaviR; the portal does not currently provide automatic account deletion or a fixed automatic retention period. Calendar events remain in the practitioner’s calendar until deleted there. Changing a name in the portal does not update the titles of earlier bookings.

You can edit your profile and family information in the portal. To request access, correction or deletion of your account, family information or calendar appointment data, email info@rivavir.org. We will verify the request and coordinate calendar changes with the relevant practitioner, subject to applicable retention obligations. These requests are handled by RivaviR rather than an automated deletion feature.

Practitioners can revoke access in their Google Account connections and contact RivaviR to remove their stored authorization. Revocation stops further access but does not delete existing calendar events or portal data.

Policy changes

Updates will be published on this page with a revised date.