Privacy Policy

Last updated: July 19, 2026

ODA Mission ("ODA Mission," "we," "us") provides back-office software for small service businesses, including appointment scheduling and customer communication. This Privacy Policy explains what information we access, how we use and protect it, and the choices available to you. It applies to the ODA Mission application and its Google account integration.

1. Who our users are

Our direct customers are the service businesses that use ODA Mission to run their operations. A business owner connects their own accounts (such as their Google Calendar) so that ODA Mission can schedule appointments and communicate with that business's customers on its behalf.

2. Information we access

Google user data

When a business owner chooses to connect their Google account, ODA Mission requests the minimum Google Calendar access required to provide scheduling:

• https://www.googleapis.com/auth/calendar.freebusy — to read free/busy availability so appointments are proposed only at open times. We do not read the contents, titles, attendees, or descriptions of existing calendar events through this access.
• https://www.googleapis.com/auth/calendar.events — to create, update, and manage the appointment events that ODA Mission books for the business.

This access is granted only after the business owner explicitly authorizes it through Google's standard OAuth consent screen, and only for the Google account they choose to connect.

Other information

• Business profile — information the business provides to configure its account (e.g., business name, operating hours, notification preferences).
• Appointment and customer details — information the business provides or generates to book and confirm appointments (e.g., a customer's name, phone number, and appointment time). This is supplied by the business, not collected by us from its customers directly.

3. How we use information

We use the information above solely to provide and operate the ODA Mission service for the connected business — specifically to:

• check calendar availability and create or update appointment events on the connected Google Calendar;
• send appointment confirmations, reminders, and follow-up messages on the business's behalf;
• route high-stakes actions to the business owner for approval; and
• maintain, secure, and troubleshoot the service.

We do not use Google user data for advertising, and we do not use it to train generalized artificial-intelligence or machine-learning models.

4. How we store and protect information

Google account credentials (OAuth refresh/access tokens) are stored securely and are used only to perform the calendar operations the business has authorized. Each business's data is logically isolated from other businesses. Access to stored data is restricted to the systems and personnel necessary to operate the service.

5. How we share information

We do not sell personal information, and we do not share Google user data with third parties, except:

• with the business that owns the connected account, as part of providing the service to them;
• with infrastructure service providers (such as cloud hosting and messaging providers) strictly to operate the service, under obligations to protect the data; or
• where required by law.

Text-messaging opt-in and consent data are excluded from the sharing described above: we do not share SMS opt-in or consent information with infrastructure service providers, third parties, or affiliates for marketing or promotional purposes.

7. SMS and mobile information

When a business uses ODA Mission to send appointment-related text messages, we collect the information needed to deliver them: the customer's name, mobile phone number, and appointment details. This information is used to send appointment confirmations, reminders, and service follow-ups on the business's behalf. Message frequency varies by appointment activity — typically 1-4 messages per appointment. Message and data rates may apply.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

We do not share, sell, or otherwise provide your mobile phone number or messaging consent information to any third parties or affiliates for marketing or promotional purposes.

Mobile phone numbers and message content are shared with our messaging infrastructure provider strictly to deliver these appointment-related messages, never for marketing or promotional purposes. How customers opt in and out of these messages is described in our Messaging Policy.

8. Data retention and deletion

We retain Google account credentials and related data for as long as the business keeps its Google account connected to ODA Mission. A business can revoke ODA Mission's access at any time by:

• disconnecting the integration within ODA Mission;
• removing ODA Mission from their Google Account at myaccount.google.com/permissions; or
• contacting us at the address below to request deletion.

When access is revoked or deletion is requested, we delete the associated Google account credentials and stop accessing the Google account. Appointment records the business chooses to keep remain under the business's control.

9. Children's privacy

ODA Mission is a business tool and is not directed to children, and we do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and post the new version at this address.

11. Contact us

Questions about this Privacy Policy or your data can be sent to support@odamission.app.