RoundTo

Privacy Policy

Last updated: May 2026

1. Who We Are

RoundTo is operated by Warren Dunne, United Kingdom. We are the data controller for the purposes of UK GDPR. Contact us at legal@roundto.co.uk with any privacy questions.

2. What Data We Collect

Tradespeople

  • Name, business name, and trade
  • Phone number and email address
  • Base address and postcode
  • Google Calendar access tokens (if you connect Google Calendar)
  • Subscription and billing status (not payment card details — these are handled by Stripe)

Clients (homeowners)

  • Name and phone number
  • Property address
  • Job description and any notes provided
  • The times you selected for a visit

Automatically Collected

  • Basic usage data (pages visited, errors) for the purpose of keeping the service running
  • We do not use advertising trackers or sell data to third parties

3. How We Use Your Data

PurposeLegal Basis
Providing the scheduling serviceContract performance
Sending OTP login codesContract performance
Syncing visits to Google CalendarYour consent (when you connect Google)
Sending appointment remindersLegitimate interest
Billing and subscription managementContract performance
Improving the serviceLegitimate interest

We do not use your data for advertising or sell it to any third party.

4. Google User Data

When you choose to connect your Google Calendar, RoundTo requests limited access to your Google Account and uses it only to provide the calendar-sync features you ask for.

What we access

  • View and edit events on your calendars (auth/calendar.events)
  • Your primary Google Account email address and basic Google identity (auth/userinfo.email, openid)

How we use it

  • Create an event on your Google Calendar when you confirm a customer's visit
  • Delete that event if the visit is cancelled, rearranged, or removed (we only ever delete events RoundTo created)
  • Read events in a selected date range so we can show your existing commitments alongside your RoundTo visits, and warn you when a new visit time clashes with something already in your calendar
  • Display which Google account is connected (“Connected as…”) using your email address

We request the minimum access required for these features. We do not access your Google contacts, files, or email.

Limited Use

RoundTo's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google user data only to provide and improve the calendar features described above; we do not transfer it to others except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition; we do not use it for advertising; we do not use it to train generalised or AI/ML models; and we do not allow humans to read it except with your consent, for security purposes, to comply with law, or where the data has been aggregated and anonymised.

Revoking access

You can disconnect Google Calendar at any time from RoundTo Settings, which removes our access and deletes the stored Google tokens. You can also revoke access directly at myaccount.google.com/permissions.

5. Who We Share Data With

We use the following third-party services to operate RoundTo. Each acts as a data processor on our behalf:

ServicePurposeLocation
NeonDatabase hostingEU
VercelApplication hostingUSA (SCCs apply)
ResendEmail delivery (OTP codes)USA (SCCs apply)
TwilioSMS deliveryUSA (SCCs apply)
GoogleCalendar integrationUSA (SCCs apply)
Ideal PostcodesUK address lookupUK
StripePayment processingUSA (SCCs apply)

Where data is transferred outside the UK, we ensure appropriate safeguards are in place (Standard Contractual Clauses).

6. How Long We Keep Your Data

DataRetention Period
Tradesperson account dataUntil account deletion + 90 days
Client visit data3 years from visit date
Billing records7 years (legal requirement)
Login codes (OTP)Deleted immediately after use

7. Your Rights

Under UK GDPR you have the right to:

  • Accessrequest a copy of the data we hold about you
  • Correctionask us to correct inaccurate data
  • Erasureask us to delete your data (“right to be forgotten”)
  • Portabilityreceive your data in a machine-readable format
  • Objectionobject to processing based on legitimate interest
  • Restrictionask us to limit how we use your data

To exercise any of these rights, email legal@roundto.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

RoundTo uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

9. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed session tokens, and complete data isolation between tradesperson accounts.

10. Children

RoundTo is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify tradespeople by email before any material changes take effect. The latest version is always available at roundto.co.uk/privacy.

12. Contact

Warren Dunne

legal@roundto.co.uk